Sometimes it even works the other way, a person (usually Officer) can be personally responsible for company actions, even when they didn't commit it themselves. Logic is they should've known or implemented processes in a way to prevent it in the first place. People often don't realize how much responsibility officers carry for the actions of their employees they have little control over.
Also https://en.wikipedia.org/wiki/Piercing_the_corporate_veil