Negligence of that order would surely be prosecuted.
You mean falling for a phishing scam? You must not have any experience in security if you truly believe that they're going to prosecute someone for that lmao.
Of course, if the employee openly expressed their carelessness and distain for their employer that changes things but that seems unlikely to be the case in reality.