Fixing the bug does not necessarily fix anything else it caused though, and none of the questions in my post are answered by “fix it”.
Here’s another one: should the incident actually have an impact on anyone of the companies employees yearly reviews? Either positive or negative? Why?