It should be over 100%. The ideal goal is that a company that has a massive date breach due to their incompetence (such as refusal to hire experts at market value) should cease to exist. I still think we need prison time for those making the poor decisions. Even if they didn't intend to hurt anyone, should we tolerate recklessness of that nature?