It's quite easy to solve. Hold companies legally accountable for computer fraud and abuse.

The problem is that those in the position to do that are not interested.