It is definitely a thing that happens: https://www.nbcnews.com/tech/security/former-twitter-employe...

Hard to say how often / what fraction of occurrences are never caught, or caught but never publicized.