At best this was pure carelessness at worst deliberate. A thorough investigation is required and if found to to be malicious then the full weight of the law needs to come down on the responsible parties. If just careless then walking papers and that includes those who are in supervisory positions in either case. No excuses are acceptable.
Tom, take a look at Brian Kreb’s post 22 Jan about GoDaddy and DNS.