What about them? They got screwed.
No, they didn't get screwed.
The contract is written in such a way that it is always the merchants that take the financial hit for fraudulent charges, not the banks (even if the merchants themselves did everything correctly on their end).
Also calling the receptionist at a dentist's office "an insider" is misleading. That kind of language was specifically designed for the banks to avoid taking responsibility for the fraud. It was not the dentist's office that was being ripped off, it was Apple. By that novel definition "an insider", there are millions of Apple/Banking insiders in the US alone, from the waitress, the janitor, and the bus boy of every restaurant or little hole in the wall where they serve food, to the regular employee, janitor, intern, and temporary employee of every office building where credit card numbers are taken over the telephone.
I know the use of the word "insider" was introduced by Slashdot itself (either the submitter or the editor), but the word "employee" used in the title of the original ITWorld article leaves a lot to the imagination too, probably for that same reason that if one was to clearly describe what happened, everyone would be assigning blame to the banks and their system, instead of excusing the breach on having an insider employee somewhere (which is very hard to protect against).