The fact that a data poisoning attack has become so accessible makes it a real danger. Once the model training phase is over, it's very difficult to correct the machine learning model. It would require a lengthy analysis of all the inputs that have trained the model, to detect fraudulent inputs and remove them. But if the mass of data is too large, this analysis is simply impossible. The only solution is to retrain the model.