Re: It's not the company's fault.. yeeesh.
"Yes, the company obviously had crappy InfoSec; however, this doesn't put them at fault. If you leave your home unlocked, this doesn't mean anyone can enter it and browse through your possessions."
Blame is not a zero-sum game. Sure, if you leave your house unlocked it's still illegal for someone to wander in and take your stuff. But your insurance company won't pay anything to cover the losses, because it absolutely is your fault that you left it unlocked. Exactly who shares what portion of the blame will obviously vary; with the example of the house the burglar is a criminal who should go to jail, while you've just been a bit stupid and will suffer some financial loss as a result. But just because one party was worse than the other doesn't mean that everyone else involved must be completely free of any blame.
Biting the hand that feeds IT
