reasonable if it's a systemic failure, but the company did notify the US Navy when it found out (though deflected the actual cause). sounds more like a rogue employee.

disproportionately severe penalties will have the opposite effect in future cases- as people will do more to hide faults than reporting them.