Contractors like Booz can get in deep shit for doing that. The employee usually gets a mark on their security record. The contract usually takes a hit and can potentially lose the contract if there are multiple security violations in contract period. But to a casual observer, they don't see any of that because they don't broadcast that to everyone. I've seen people lose their clearance for not reporting other people's violations. Hell, another Booz employee got busted by the FBI for having a stash of classified info at his house just recently.
Petraeus got burned for less because he wouldn't go up to bat for the Clinton machine. Meanwhile Hillary forwards emails to uncleared people such as her staffers and maid to print out. These are the same people like Podesta who use "p@ssword" as their password and fall for phishing emails. Let's not forget that she also forwarded classified information to her daughter Chelsea that pertained to the financial situation in Greece, which is an industry her husband is involved in. There's plenty in the state department released FOIA to prove intent. Which by the way, was never a requirement to charge someone with mishandling classified information.