Indeed, and it's a fine line between "the cost of doing business" and ruining a large company over the decisions by a few people. Would probably have been better to go after the people at the top than fining the company..
Criminal violations are not supposed to be protected by the corporate veil.
And they aren't, at least in the US. Just look at Martin Shkreli actually serving 5 years in prison for securities fraud and personally repaying ~$70mil.
P.S. none of this is related to the Daraprim controversy btw. Thought to mention because I have been seeing that misconception quite a bit online.