On the flip side you are bailing out a company for neglecting to have a disciplined security practice and a failure to build and execute their disaster recovery plan.

Rather than bail out the company perhaps nationalizing it is the better recourse. It would certainly make other companies seriously reconsider how they invest in DR and security.