>Did it hurt the bottom line of a large company by 1% or less with no other obvious impact? Maybe they just have to pay it back plus a large, punitive penalty. Maybe they have to do some public service too. But jail doesn’t really make sense. If anything, jail just prevents them from compensating the victim.

So what does it mean for the movie trope where a hacker steals fractions of cents from everyone's bank account, leading him to get millions in loot? By any meaningful measure that didn't hurt anyone's bottom line, so that ought to be fine, right? Even if you think this is somehow okay, what about the "death by a thousands cuts" problem, where a trillion dollar company gets scammed 1000 times, which becomes a deleterious amount? Do you have to prosecute people at some point? How would that work?