An Attempt at Blame Shifting?
Ultimately Equinefax is responsible for the website and for proper monitoring of all activity on the site. While the attack may have used an bug in this or that third party code does not absolve them of doing their jobs. Apache is responsible for fixing and providing updates/patches in a timely manner once they have been notified, which all evidence points to Apache being responsible.
