Actually I'd argue that it's a UK government problem -- the person who responsible should have been thrown in jail long before he managed to figure out how to social engineer multiple unrelated systems.

Society needs a certain level of trust to function, if the law ignores people who continuously try to defraud others than they are just going to get better at it.