Comment by Leynos

At the very least this amounts to culpable negligence. (In the sense that their lack of precautions here has clearly exposed other organizations to risk of harm. I can't speak for the legal sense.)