That's exactly how the criminal justice system should work? If you can't prove a particular person is responsible, you don't have a case. That's exactly why they prosecuted the company as a whole instead, because easier to prove the company as a whole did something, rather than a specific person.