HuggingFace does not decide who gets charged with crimes. Plenty of people go to prison for crimes the victim didn't want them prosecuted for.

In the US if a person does it, it's a crime. If a business does it, it's an industrial accident and maybe they sue each other.