The judge is unhappy about the sum involved and the vagueness of promised cyber-security fixes.