This has happened with Mt. Gox last year (Gox was blamed) as well. The issue is not so much blaming the victim, as blaming the only identificable source of error (try tracking down these hackers...).
This time MtGox even knows who has stolen the funds. Does that change anything? Apparently not!
Where have they said that?
Regular customers have to wait weeks to get their funds out, but the hacker managed do withdraw this in an instant. So of course, MtGox knows them. And so eventually somewhere in this MtGox account thread they stated that they do, but don't share this information publicly.