[slics]

SEC now requires all companies must report their breaches on their filings. Maybe that should reflect also a way to hold companies accountable via some kind of fine based on a threshold of the damages done.

[m-s-y]

Private companies do not have an SEC reporting obligation.

In the US only 1% of all companies are public.

[HeatrayEnjoyer]

What % if by revenue?

[mahogany]

Is this number even known? How would all private revenues be calculated?

[bee_rider]

Or by breaches, but then of course that will be hard to gather.