It is you, not Tom, who is to blame. The antecedent (it) of the subject who , is singular. Compare with the plural: You all are the ones who are to blame.
New words, one handy idiom, and a 2-minute quiz — delivered to your inbox to keep your streak alive.