Comment by ep103

we could pass laws making companies liable for their security (or at the minimum, remove current laws that shield companies from being sued for damages when they leak personally identifying information)

But its easier to blame China, so let's do that.