Do I really need to point out the differences between these two stories or can we agree they're not actually comparable?
> Google engineer who allegedly used his internal clearances to access private Gmail and GTalk accounts so that he could spy on and harass people, including four minors.
In this article, it says some people in Tesla posted a few pics of funny signs and pets on an internal message channel read by some tens of people, and at least one intimate, but not nude pic. Which is not what I thought when I first read the headline here.
I guess there were some more concerning things, like someone approaching the car naked, but it doesn't have any context and that could be something they might be reporting as a crime for all I know. The article doesn't say one way or another and leaves us to assume that all incidents are the same as the people captioning pet pictures, but there's no clear relation.
One was targeted and the other was not, but they are in the same class of issues even if the severity is different.
There is indeed a culture problem.
While having it be ok as corporate culture is a bit worse, fundamentally the problem is that private personal data is available to these corporations so at that level it is the same problem.
The only systems which are safe are those which either never send private data outside of local (local to the user) devices, or, where data sent out is encrypted client-side with keys which are generated, stored and only ever available to the client.
Anything else, will be abused.
They still expect the same sort of treatment that they get from their traditional health care providers and banks etc, with strong regulations enforcing the correct behavior.