I didn't know about this company before, but a cursory search suggests they were only based in Germany, not used by the German government. Title is misleading, especially as it is not the original title of the article, and Germany has in fact prosecuted them.

That said, good riddance. We desperately need accountability for malware coming from state actors.