The companies are responsible for what their agents do. Full stop. More government regulation is NOT the solution. The government doesn't even know how this stuff works, like the individual companies do.
The agents hacking other companies? those are crimes. If you did it, you'd be in jail. Why should/do the companies escape accountability?