The bug was triggered when a customer changed their settings, the company says, promising a “post-mortem”.