Well that would be the OCR. It’s doubtful they would waste a lot of resources going after a developer, unless they really thought he had done something. Usually they go after leadership.
And then leadership hires good lawyers that do their best to deflect the blame to the developer.