The creators of DAO does have a legal entity, Slock.it.
It's that close a connection? That's a shame. The DAO is interesting, but the door lock business is a marginal idea. Creating the DAO just to fund the door lock business starts to look scammy.
What liabilities the Ethereum Foundation have for the DAO is far from clear, but they work close enough with it coordinate the vulnerability and make changes to the underlying software specifically to handle this case.
The creators of DAO does have a legal entity, Slock.it. They are incorporated in Germany. This is not the first cryptocurrency theft in the world.