Why not use the tried and tested solution?
Demand that Mr China is sent to America immediately to face charges of doing millions of dollars of damage to US government computers and threaten him with a thousand years of imprisonment. The threat alone will convince hackers not to try the same thing again, and everyone can set their passwords back to '1234'.
Biting the hand that feeds IT
