Symantec faced no serious legal repercussions. It was simply distrusted by the root programs, the same way eMudhra will be. I think this is a just-so story.

Legal repercussions would have to come from proven damages, and something like that seems like it would be very hard to prove. I'm not that familiar with the Symantec incident, but yeah, it sounds like the system corrected itself.