When has any company ever faced consequences from atrociously bad code leaking data or negatively impacting their customers?

Even Solarwinds is still alive.

EU companies are judged guilty of negligence because backups were not totally disconnected (even though distant site) and ransomware did destroy them.

So that is starting to dig deeper than a plain mistake. I guess we will soon-ish witness the first AI slop trial going on, this will be interesting to follow

Knight Capital