No, your parent poster is correct. Blame goes to the negligent persons responsible for the IT system and everyone else up the chain. They are at fault for getti

No, your parent poster is correct. Blame goes to the negligent persons responsible for the IT system and everyone else up the chain. They are at fault for getting in the first place into the situation where the ransom attack was possible. The state prosecution should have a field day. To make this crystal clear: they did not patch their software that was already vulnerable for half a year, and there was no supervision to enforce it getting done.