I don't think I've ever seen a consequence (from a legislator's POV.)

If someone does a high-profile enough hack, that can only mean more laws and increased police power to target it.