There has to exist a difference between victim-blaming and people screwing up at their jobs. In the case of the SolarWinds attack, their management seemed to b

There has to exist a difference between victim-blaming and people screwing up at their jobs. In the case of the SolarWinds attack, their management seemed to be quite technical and the attacker was just too strong/sophisticated, so SolarWinds is considered a victim. But in the case of the Equifax, they're considered at fault because their head of security seemed unqualified for the job and the victims were actually the millions of users whose private data was put at risk of abuse. The probability in this case is very high that the upper management at Funke was quite incompetent at how they've digitized their operations.