We should fine companies for data breaches.