The problem of punishing corporations, is that the people that benefited from misconduct are possibly gone from the company already, and you might be punishing current employees who might even be unaware.

The people responsible for the misconduct at the time need to face criminal prosecution, and their personal wealth has to be first on the line for damage reparations.