If there is any finger to point, it's at KPN for hiring an untrusted contractor and giving them sensitive access.