I’m less shocked than I should be. National ID registries can be incredibly convenient, but when something goes wrong, it can go terribly wrong. Despite my general misgivings, I hope the IT company is visibly held accountable.

What would that accountability look like?

Not existing preferably.

This is the likely outcome. It was a company employing 2 people.

Strange way to say prison time. Or if you meant capital punishment harsh but fair.

Intensify the "beware of scammers and identity thief" campaign. Go all in - unblockable SMS's, emails, and notifications. Treat any feedback and objection as an attack.