Why not make the execs who sold stock with insider information pay for the ransom?
I think that's reasonable punishment
Read about hacker demands on cointelegraph
https://www.cointelegraph.com/news/equifax-hackers-demanding-26-mln-in-bitcoin-or-else