Yes, but not his fault that he was hacked, for he cannot possibly be responsible for the actions of another.
He announced that he had an insecure uploader in a post on the forums. Since everyone here loves brown townogies, let me compare that to taping the keys to your house on a nearby street sign, then leaving your house. Sure people may not find them, and likely won't be looking for them. There are people though (see: Zoneark) that will be looking for every chance to do something like that. If you never give someone the opportunity to do something, it most likely won't happen because of you.
In this case Zoneark took advantage of an insecure uploader. If Pandan had secured his uploader, or even better yet had never told the forums that it was insecure, then this wouldn't have happened. I'm not saying it's all Pandan's fault, only partially.
