That's the whole problem. There is literally no one holding anyone accountable.

These corporations already expect to have a data breach. They call it "cost of doing business". And USA let's every company do this.