Unfortunately the company responded with attacks, including legal threats, supposedly(1) filing criminal charges against the researchers, spreading news of everything being competitors’ conspiracy against them, and general PR-produced bullshit.
It seems there is formally no direct victims and potential future clients are “pragmatic”, so it’s likely Newag will also get away with it — not counting short instability in their shares price.
(1) They are the sole source of this information.