This is ludicrous. That's like blaming the rape victim for wearing alluring clothing going to a club, but not carrying a gun and learning martial arts to defend themselves.
Yes, Stratfor is guilty of having lax security (I've been affected by this), but the bottom line is that these hackers are the ones that committed the crime and released this credit card information.
if you want to switch analogies to rape, fine, but i think that's a much worse analogy to use.
blame isn't a zero-sum game. if a hypothetical human walks down the street in provocative or revealing clothing in a bad part of town without any way to defend themselves, then you can argue that, at the very least, he (or 'it' if you don't believe in the genderless 'he') should not be surprised that someone attempted to rape him (it). That in no way excuses the rapist for what he (it) did, or lessens the blame apportioned to the rapist.
relating your analogy back to the stratfor situation, the blame stratfor gets should in no way lessen the blame that the hackers get, but stratfor should be held accountable for the fact that they essentially walked into an area known to be infested by opportunistic rapists wearing provocative clothing with no means of protection. regardless of how wrong it was that stratfor got metaphorically raped, one still needs to look at stratfor and ask, why in the world would you do that? how could you even expect anything different to happen?
Yes, Stratfor is guilty of having lax security (I've been affected by this), but the bottom line is that these hackers are the ones that committed the crime and released this credit card information.