Seems like an effective approach to any fines would be to sum up the estimated profits they made, add in the estimated cost to innocent parties, then multiply it by some number.

Of course that relies on someone actually being held accountable for a change...