Companies can certainly be charged with crimes. Punishments can be via fines or sanctions (court appointed monitors, etc).
Individual employees can also be charged for their specific actions as part of the performance of a crime.