It seems a bit wild that this wouldn't be immediately picked up by the executive team, payments halted and the CEO fired over the course of 4-8 hours. So quickly that there is basically no crime and nothing to prosecute. This crime was exactly the sort of things banks are designed not to do.
[0] In this case it was a couple of payments, but sending bank money to a private account is a red flag. We're talking blood red, rose red, angry-bull red red flags. It isn't a minor request.