Man, if I was working at BBC Miami, I think I would be scared to death... heads are gonna roll....
At this point, I feel bad for the people at BBC Miami. It seems obvious to me that they put up materials on an unsecured sever, probably with the best of intentions, and never realized that someone outside would have access to the files. It's an innocent mistake that happens more often than anyone realizes. The only reason we know about and are discussing it is that it involves Doctor Who and we're all passionate about the Doctor.
I don't know whose head would roll, nor do I know if heads [iwill roll. Moffat may want a head to roll, but I doubt seriously that his influence extends so far. If a head rolls, the person whose head should roll is an IT person; he's the one who didn't secure the server which sent the files into the wild. But, in my experience, IT almost never takes the heat in a situation like this. So, it will be some minor player, someone who thought he was doing what he was supposed to do -- and very likely doing what he was told to do.