somebody has some splainin to do to the stockholders then...
Having done large system as well as web based system testing, the question i have is how much, what type, and what scenarios were tested, and was this a home-grown application, or was the development hired out?
Whoever is head of QA, and whoever was the test team lead are toast right about now. And whoever lead the code reviews.
I wonder, maybe a trojan horse was built into the system?