Yep, I would explain the whole situation and resolution including mitigation for the future. If they start asking specific names then I'd tell them exactly what they ask. No need to crucify the guy; but this is your job and he is not your friend. It was his fault and he should take the blame.