Like going to jail for getting robbed !
This is not a good trend.
If the provost can prove beyond a shadow of a doubt that these two could have taken reasonable steps to prevent the loss of data, then he is right in firing them. Its obvious that this person or persons are totally ignorant of how IT security works and how effecient hackers are in bringing systems down.
Then again, no matter how good we are, there are a 100s of times more hackers out there trying to overcome the best security every night of the week and then the weekend.
The questions is: Were these two employees given the best training available regarding the latest in security? What tools were put at their command to help them do their job ?
To me it just looks like finding a convenient scapegoat to avoid the spreading of blame.