Who should be held accountable at a corporation whose network security is breached by a hacker?

The hacker.