That's the way to apologize, very impressive way to handle the situation in individual level. Although the bigger issue is, how was this ever possible? Do they

That's the way to apologize, very impressive way to handle the situation in individual level. Although the bigger issue is, how was this ever possible? Do they push code to production without any normal or security code reviews? Without pen-testing? And if that's the case what does it stop this problem to happen again?