Really, if you don't put your home security alarm on and people steal stuff then you should go to jail?
Really? Did you just make the worst analogy possible?
A better analogy would be this...
Your home security company promises a certain timeframe before personnel are dispatched to your home after a break and enter. They fail to meet that timeline and the perpetrators steal significant assets.
While the perpetrator's should be reasonably punished, the greater onus of responsibility was on the security company to ensure those assets were not stolen.
This is the exact same scenario that happened earlier this year during the PSN Hack. Sony lost a sizeable amount of profit, but that was not nearly the correct punishment for their lax security measures which allowed hackers to seize the private information of their customers.
The hackers should be given a hefty fine to pay. The company's security personnel should be the ones put in jail instead of simply getting fired. If the company was smart, they would hire these hackers as a force for good instead of wasting good talent by throwing them in jail.