>I think if Boeing made some faulty planes that fell out of the sky, their employees aren't usually charged. Boeing is definitely sued and held criminally liable sometimes? So I don't think this is true.

That's not universally true. If a coke employee goes rogue and decides to kill a pepsi employee, the employee will still be charged with murder. If his manager ordered him to do it, the manager will get charged too. The only time the scenario you described happens is if the blame is too diffuse to blame any particular person, so they charge the company instead, which is often easier.

Directed one-on-one murder with intent is obviously not a comparable scenario.

This is someone carrying out the tasks of their company and inadvertently hacking other computers in the process. The damages in this scenario is also unknown.