 that rather than concentrating only on the parties carrying out these attacks, serious considerations should be given to applying significant penalties to the persons running these large firms in cases where reasonably foreseeable situations permit these breaches