It’ll take years to build up trust again, they need to avoid squandering what little goodwill they have left (from people with memories too short to recall the Sony Music rootkit debacle).
The black mark stays on their permanent record, but they have an opportunity to demonstrate that they have actually reformed and aren’t just saying the right things to mitigate the current PR disaster.