I haven't personally seen this particular case either but I have no doubt it could happen. I've seen orgs where a blameless type culture isn't natural, and I've had to explain to the leadership that publicly humiliating (in jest) someone for getting caught by the phishing tests or posting private data to a pastebin type service is a bad idea.

And I've interacted with plenty of people who externalize everything that goes wrong to them, naturally some of these folks will be in leadership positions.