It was a lot longer ago, like 2.5 to 3 years ago, but that's pedantic.
My own father was shocked that they'd do that (his death is how I know the timeline; no sympathy required, I've dealt with it, it happens). He really respected them, primarily through my respect of them and excitedness about their tech. He was blown away that they'd even consider such a thing. He just couldn't calculate how such a misstep could happen. I can, but what a mistake that was.
I've seen an argument that this could have been a calculated risk to prevent attacks when they enabled increased encryption. I don't think it was that, even if that was the resulting effect. They are too protective of their brand to deliberately take a hit.