They are responsible either way. If a company hires bad persons and they do bad things with company ressources - the company is held accountable (in theory).