This is on 2LOD. Regulated business have to demonstrate controls, assurance and governance when promoting code to production. Big errors like this are systematic problems. What went wrong with change,what went wrong with testing, what went wrong with post implementation reviews. Who signed it off.