Blaming employees and potentially ruining their lives in the wake of a cyber attack is not the way to do things.