Why?
Wouldn't you rather focus your efforts and criminal proceedings against the actual perpetrators rather than the head of the business who is being forced to make a business decision because of the ineptitude of their IT department?
Someone in IT fucked up - and allowed this to happen, it's that simple. Direct your rage there.