Consequences are severe, including significant financial penalties (fines), criminal prosecution of individuals, regulatory sanctions (cease-and-desist orders), and severe reputational and operational damage.