[twinkletwinkle]

I agree. Zero out the stockholders and send some executives to prison for negligence and fraud. The corporate death penalty is the only way we'll see companies take infosec seriously. If I were CEO at Transunion right now, looking at what's happened to Equifax as a result of the breach (nothing), I wouldn't spend a minute's time thinking about upgrading my security practices.