Probably the majority were voluntary disclosures hence the low penalty rates. Any prosecution of even a single incident would take a huge expenditure of time and money generating a mountain of search warrants and paperwork. I would have to question the CRA's ability and resources to properly deal with the number verified or suspected of incidents.