The c-suites have the ultimate power and therefore ultimate responsibility for whatever happens in their organization. Similar to how parents can be held criminally liable for their children’s actions. It’s just that much more incentive for them to make sure things are in order in their organization.
Also, Citizen’s United ruled that corporations are people, so they can be held to the same standards of responsibility as other people.
That’s the thing though…I think it is part of their due diligence to know what’s going on in their own business. If they can’t guarantee that it’s safe, they shouldn’t release it.