I had a friend at Microsoft when I was there who tried to get a URL spoofing vulnerability fixed by the IE team and when that failed used it to hack their hotmail accounts. He almost got fired over that one.

I knew one person who did get fired. The thing though was that the firing occurred at a time when they were trying to push for higher attrition during a move of a unit overseas so not sure how much I can read into it.