Offshoring support for financial data should be illegal.
Even if they find the inside individuals, how could anyone ever present a legal case?