No, blaming the victim would have been:

> The only reason this happened was because they failed to secure their own systems, it was bound to happen

Instead, parent said:

> IT also failed to put enough checks here

My emphasis on the "also".