Who gets blamed when employee data’s hacked?

Insurance giant Aetna was recently sued by employees after their personal data was stolen by hackers. Did the court hold the company liable?