How so? They were negligent. Beyond that, you're also assuming the client didn't have lawyers--there's no way this contract gets signed off on without the vendor absorbing the risk.

If all the legal work was done properly, the vendor would end up in court with their insurer.