Criminal negligence seems like a real possibility to me. I'm not sure what Krebs on Security post you're referring to?