If 148 million customer records can be nabbed
and the blame shunted to some poor developer for not shoving a new version of a library onto a live production server or twenty, then things were clearly so wrong on so many levels that a lengthy essay could be written about all the failures at every level of the company.
Categories including build and dependency management, release management, integration testing, certificate management, access control to live systems, and so much more would show neglect all over the shop. Neglecting all these things for a company with responsibility for so many people's crucial data is fundamentally negligent. Especially in the context of "aggressive expansion".
And criticising obscene rewards for failure ain't socialism bud, capitalists are supposed to believe that failure comes at a price. For the company that failed, not some easy scapegoat. "The buck stops here" has been replaced with "The bucks stop here" for the bosses who rake in millions every year.