This is typical of people acting irresponsible. The real blame here is the people responsible for securing the data in the original place. They are the ones at fault and are using the media to distract from the fact that they are the failures in the first place. Had they done their job, secured their data, they wouldn't be searching high and low for someone to blame.
If I leave $100 bill on a table in public and return to find it gone, I'm the one to blame. It's time the parties responsible for securing systems with worldwide access to stand up and admit their failures and to start doing their jobs.