The fault of low level civil servants?

Regarding the recent data leak:

The Conservatives say the crisis is down to "systemic" errors at HMRC - but the government insists it was the fault of low level civil servants.'

Source

Rubbish - why was it possible for a low level civil servant to download the entire database in one go and burn it to CD? (i.e. the potential is there to steal it).

A low level civil servant should only be able to view a record at a time, and not export the records at all. This is trivial.

I still can't believe that they thought it'd be too expensive to drop sensitive fields.