They can just say "We weren't told about that" and they are then not liable.
This isn't the first time - from memory CFE had to pay $22m a few years ago after being audited by the ATO, but I think it took a number of years (and lots of money) to defend.
That was during the better times when CFE had money, now with little money in the bank and not much prospects, not looking good.