The case did only involve a civil complaint, so it probably would have ultimately ended up with a financial settlement and some sort of compromised "corrective" measures like we see here, but I really think this is an injustice for the people who had their identities and privacy compromised, and for HP shareholders in the long run. The evidence that senior executives at HP, potentially including Mark Hurd, either ignored or were ignorant of the ongoing, "probably illegal" actions
is pretty well documented, and pretty overwhelming.
Patricia Dunn took pretty much all the heat for this, and that's unfortunate for her and HP. It seems to me like she should have had a better grip on what was happening at HP, but it doesn't seem to me like she should have been the only one with that responsibility. A full, objective, and independent investigation should have been the first think on everybody's list. Instead, this case is now settled, Congress has moved on, and Dunn will be focussed on proving her innocence.
The unfortunate thing for Mark Hurd is that his level of responsibility and accountability wasn't determined in this process. The second HP hits a performance blip, this scandal will be the first thing on every shareholder's mind when they're thinking of who to blame. When that day comes, I wouldn't want to be in Mark Hurd's shoes.