Re: Passing the loss to the shareholders is fine
Companies that offer ESPPs often require holding the stock for a certain number of years before being full vested, when purchased below market price. These programs would be less attractive at companies where the employees suspected management was playing fast and loose with the regulations.
Thousands of employees at the big banks knew how poor their mortgage underwriting standards were, if they thought there was a chance of losing their stock they'd either not participate in ESPPs or sell them early and lose the vested part. Probably fewer would know about the Equifax breach, but the IT people would at least know how little attention they paid to security, and tell their friends in other parts of the company "sell your stock, it is a matter of time before disaster strikes!"
Biting the hand that feeds IT
