It happened in this case. From the article, "Zeeshan Zaidi, the former head of Ticketmaster’s artist services division, pled guilty in a related case to conspiring to hack the rival company..." Anyone else who conspired with him could be charged with the crimes.
> shareholders SHOULD be punished for the actions of the company.
The entire purpose of the corporate entity is so that investors can share in the ownership of a business that they do not manage without risking personal liability. Shareholders can completely lose their investment because of liabilities of the corporation, but they usually don't face personal liability.