Depends how you read it. When I see “was the result of a compromised password” I think “they should’ve used something mitigates the risk of compromised password

Depends how you read it. When I see “was the result of a compromised password” I think “they should’ve used something mitigates the risk of compromised passwords”. I don’t think it’s blaming the employee but rather blaming the company’s fragile security model. Everyone should use MFA on as many things as possible