Bring in punishment for the civil servants, but I would love to see the actual politicians in charge of these departments being held accountable and being tried and hanged (sorry meant jailed).

As for phishing, just don't answer any emails from big companies, too easy to get bent over if you do.