how could that possibly make you even indirectly responsible for the crime? It says in the article that the attackers went to the ATM anyway and got mad that one of the cards got eaten by the machine. So they would have done that regardless if they had your product or not.