The other cost we can introduce into the equation is holding corporate leaders personally liable for these types of gross negligence.

Once CEOs know that they can go to prison if their customers' data is stolen, I assure you that they will suddenly become very interested in making sure their underlings follow best practices.