100% agreed. I'm definitely not making excuses for malice here (as I said in another thread, I think I wasn't clear enough in my original post)..

I think there should be much harsher punishments for PII mishandling, no matter why it happened.