What about the advertising industry?
It's disastrous that major ad vendors and organizations apparently were neither able to detect nor prevent the company's malicious advertising operations for years.
Cybersecurity agencies, regulators and lawmakers in the US, Europe and other regions must urgently step in. They must investigate the involved companies and fix the systemic risks that enable malicious ad targeting.
For example, mandate the removal of personal data from real-time ad auctions.