I wrote about Sony infecting numerous computers by selling CD's that had deliberatly been infected with malware (a rootkit) to protect the CD's against copying here.
To recap, Sony put a rootkit on about 40 CD titles that infected your PC as soon as you tried to play the disc in it. The infection hid itself from the user and made the computer vulnerable to outside attacks.
To make things worse, it later turned out that the bundled player on the discs contained GPL code that was stolen from a free project.
So, what kind of punishment do you expect Sony got?