Failed to patch in a prompt manor. Waited to disclose the issue to the public. Set up a credit monitoring service that was insecure and would auto charge you (the auto charge was dropped after people were outraged). The CEO blamed the whole thing on one person (and that person was not him).

What part of that doesn't seem like a moral failure?