Fine them múltiples of whatever money they made from this. The only way companies stop doing things like this is if fine multiplied by the probability of being caught is more than what they stand to gain. Otherwise it is just a cost of doing business.