I really don't want this to be a witch hunt (not seeing that here, just wary of pointing out individuals)—this is exactly the type of thing a business should take responsibility for as a whole. This was a process failure, IMHO.
For me it's still about the organization, and singling out individuals is about as productive as yelling at customer support on the phone.