If it's possible and profitable, there's someone out there who will do it. Which is the whole point of the legal system.

Ironically, the hardest point would probably be post-detection cleanup.

I guess the company would sue the individual for back wages on the basis of breach of contract?