Um yea, not the way it works. First external services, such as those provided by Krebs would find your data on the darknet. Second, offer employees a cut from the fines.

Pay employees when their company is fined for security breaches? Damn, good thing I'm a software developer.