I'm not going to defend Packer, but I suspect you should also equally blame the chairman, board of directors and the CEO if you are looking for scalps.
However the staff were in China and would have followed the media etc. Anybody involved should have known the huge risks. Also maybe their pay reflected the risks?
On the other hand - they may not have broken any laws at all. They may have had appropriate instructions from management for all we know. The prize for the authorities may purely be access to the database etc.
I suspect the market may be very concerned about what will come up in tomorrow's AGM. There will be some very tough questions.