The sad thing is I think Path responded far better than most others, and they've received a heavy-handed response relative to the abuses of so many others.
They were transparent, admitted their mistake, and corrected it. What's the lesson here? Bury your mistakes and avoid the PR headache and financial penalties?