Considering it let them do an unauthorized wire transfer from a system account, 12k seems pretty reasonable.