If we wish for this behavior to end, we should see naming and shaming as a good thing, a step in the right direction. Real, commensurate consequences need to happen for these people as well.
But it's apparently controversial to not just fine the company and then let the company investigate themselves.