Anyone who has been using wordpress for couple of years, and actually bothers to read the release notes of each version, will tell you that a vast majority of those increment updates are security fixes. Since around 2.7 upgrades are as easy as clicking a button - both for plugins and wordpress core updates.

Instead of playing the "poor me" game, say it the way it is; you failed at keeping your wordpress install up to date and secure and you failed at having a backup.

Smashing magazine got compromised last week and came out straight and admitted their failure on keeping it safe by not upgrading.

This scoobie guy sounds a lot like arrington - no wonder they are best friends.