> "the responsible persons" ... hmmm. Who would that be? But that is the thing. We do not know who is responsible without an investigation. We don't need to g

> "the responsible persons" ... hmmm. Who would that be? But that is the thing. We do not know who is responsible without an investigation. We don't need to guess. The local responsible agency should get a warrant and take a copy of their code repo and their internal comms. And then they need to spend the time (call in experts if needed) to figure out what happened and who was involved. If it is normal code development you can find all the paperwork which documents the change. If they tried to disguise it, (which they might have, or might not) then that is some maffioso stuff and you take the tools police use to break up organised crime groups. You take a low level person who you can incriminate and you flip them. You show them that you have enough to send them to a prison for years and offer them the opportunity to cooperate.