"Victim blaming" implies that the parent poster is saying that Funke would be responsible for the hackers' actions, that they somehow stuck their necks out and invited an attack. That's not the case.

The parent poster is saying Funke and/or their software vendors are guilty of negligence. You, too, even go on to admit there might have been vulnerabilities in the software or processes of Funke group.

The parent poster is not the one being dishonest...