Now, if she had walked down a road called "Rape Lane", in "Rapeville" with signs over every entrance with HUGE letters, in multiple languages, stating "YOU WILL BE RAPED IF YOU TALK DOWN THIS ROAD. PLEASE TAKE THIS OTHER, MUCH SAFER BUT MILDLY MORE INCONVENIENT ROUTE INSTEAD"... then yes, totally deserved.
ArenaNet said loud and clear in so many places that it started to get annoying to "Change your password. Do NOT use the same email and password combination that you have used ANYWHERE else". They wrote it EVERYWHERE. The loader. The website. The registration site. There is only so much you can do to protect your players, but at the end of the day you can't protect them from themselves. If somoene honestly read even 1 of those warnings and did it anyway, they were practically screaming to every hacker out there "COME AT ME, BRO". :-P
Note that it's not just fan sites that lost people's emails and passwords. A large portion of the top MMOs by this point have all been hacked (Almost every sony game, WoW just a few months ago, Rift just a few months ago, Champions online just a few months ago... and those are the ones I know of). If you are using the same password/email combination as any of those, you can be pretty sure something bad is coming your way.