This has happened with Mt. Gox last year (Gox was blamed) as well. The issue is not so much blaming the victim, as blaming the only identificable source of error (try tracking down these hackers...).
This time MtGox even knows who has stolen the funds. Does that change anything? Apparently not!