I'll stick with culprit blaming.

Note the purported response is "put in place enhanced security measures to minimise disruption and protect" ... which were evidently lacking at the time.