Very few people actually got punished, but a lot changed since 2008. Executives were forced to step down. Several major players went bankrupt and many more lost 95%+ of their valuations. Anecdotally, I hear that companies are taking compliance much more seriously. HN would call the surveillance at banks today Orwellian if they were more knowledgable about it.