I don't know of specific cases where a programmer was prosecuted, but I believe that knowingly and negligently leaving holes in compliance-heavy health technology (HIPAA) could result in prosecution.