IMO we are using the language of someone who we know to act maliciously on a massive scale (tens of thousands of people, including minors)as if their words can mean anything without corroboration. Frankly I wouldn't believe a rapist saying "but look at what they were wearing" or a serial killer for saying "but they went home alone".
Similarly, I don't hold any credence to a black hat saying "but look at how insecure they were".
People hired to secure records that then do an exceedingly poor job are not the victims in this situation. Victims == patients.
In your analogies of rape/murder, the (almost) equivalent would be if there was a doorman at an apartment building who was supposed to verify the identity of everyone entering the building, but failed to do so, letting the unauthorized perpetrator into the building and thus allowing the victim to be raped/murdered. It was literally his job to prevent such a situation, and he failed. You maintain that he has no responsibility in this matter?
I agree, but the comment I was responding to was operating under the assumption that the claim was true and was making a different point than merely "don't accept things hackers say at face value".
Similarly, I don't hold any credence to a black hat saying "but look at how insecure they were".