Not to mention also losing their license to practice & related legal bills.OCR refers cases to the DOJ for criminal investigation. I guess you'd need to check with the DOJ for stats related to those cases.
As far as whatever you're trying to get out with assuming individuals aren't held to account I'm aware of several folks who have lost their jobs over privacy incidents.
Last edited: