These are people who manage an organization that trades hundreds of millions of dollars per day, it's more akin to shaming them because they have a rusty screen

These are people who manage an organization that trades hundreds of millions of dollars per day, it's more akin to shaming them because they have a rusty screen door on the front door of their offices. If the internal monitoring system was functioning and they knew about the breach then they're negligent in ignoring the problems, if it wasn't functioning/it wasn't implemented then they're negligent in not having the foresight to reduce their risk.