This is a classic ICOD (information cut-off date) problem of using stale data. A human could have made the same mistake. Outsourcing decisions at scale to unreliable systems is an amplifier, not the proximal cause. Wholly unnecessary since this was a choice on the attacker's side,