Maybe Trump should have appointed someone to head the DOE who didn't advocate for it to be abolished.
I think very little of the blame can be allocated to Trump or his appointees in this case. Supply-chain attacks are incredibly difficult for the end user to defend against or detect, and this sounds like a very sophisticated one.
A supply-chain attack is when a legitimate company that you buy software from is compromised, and then they ship something to you to that lets the hacker into your system too. Imagine Microsoft was hacked and then one of the Windows Updates included the hacker's code that let them in to your computer. How would you even know anything was wrong? You were doing everything right, even keeping your system up to date with security updates.
Edit: Of course, the fact that the White House seems to be completely uninterested in
doing anything about it can be blamed on Trump. "
Stunning", according to Mitt Romney.