This has got to be one of the biggest cop-outs I may have ever heard a corporation make when they have made as large of a mistake as they did. They obviously have security wholes but are trying to blame it on other people and take no responsibility for it.
You get what you pay for, but you would think your servers would at least be safe from someone walking in and taking them.