How about Wells Fargo, 2016? https://en.wikipedia.org/wiki/Wells_Fargo_account_fraud_scan...

I don't think you have a clear idea of what you are talking about in terms of regulation.

As mentioned earlier, Sarbanes-Oxley regulations on public company reporting (which is what is being discussed here) precedes the 2008 financial crisis. There are different regulations that came into place on banks after the 2008 crisis like the Basel III capital requirements that attempt to solve a different problem.

2008 could not have happened without Freddy and Fanny. Government shares a huge amount of responsibility.

2008 had absolutely nothing to do with the regulations normal public corporations operate under while they are public. Stop bringing it up in the context of SOX because it's irrelevant and goes to show more than anything that the onerous regulation is ineffective because it came out before 2008.