Has a corporate officer ever gone to jail or been meaningfully fined for a data breach?