A former IBM cybersecurity executive filed a lawsuit alleging that IBM and AT&T concealed repeated foreign hacker breaches from US government authorities, violating disclosure laws.
The whistleblower, a former cyber official at IBM, claims both companies experienced multiple intrusions by foreign hackers and actively covered up the breaches rather than reporting them to federal agencies as required by law.
According to the lawsuit, IBM and its subsidiary companies suffered breaches during the mid-2010s. The former executive alleges IBM failed to disclose these incidents and took steps to conceal them from government oversight.
The case highlights ongoing tensions between major technology companies and federal authorities regarding cybersecurity incident reporting requirements. Companies operating critical infrastructure or handling sensitive data typically face legal obligations to notify government agencies of significant security breaches, particularly those involving foreign actors.
The allegations suggest a potential pattern of non-compliance with federal disclosure requirements. If substantiated, such violations could result in significant penalties and regulatory consequences for both IBM and AT&T.
Neither company has issued public statements regarding the lawsuit at this time. The specifics of the alleged breaches—including the extent of data compromised, which foreign entities were involved, and the duration of unauthorized access—remain under legal review.
This case adds to a growing list of corporate cybersecurity incidents involving major US technology and telecommunications firms. The lawsuit raises questions about whether current disclosure mechanisms effectively capture and report foreign cyber intrusions to appropriate federal agencies.
The outcome may have implications for how major corporations handle breach reporting obligations going forward and could influence regulatory scrutiny of the tech and telecom sectors' cybersecurity practices.
Apple has published SOC 3 audit reports for its Private Cloud Compute infrastructure, providing third-party verification of security controls for on-device AI processing that routes some tasks to Apple servers.
A developer discovered their coding interview assignment included hidden malware designed to execute via Git hooks. The sophisticated setup raised questions about interview practices and candidate vetting.
Engineers designing passkeys overlooked critical usability issues that confuse average users, according to criticism gaining traction in tech communities. The passwordless authentication standard is struggling with consumer adoption due to poor design decisions.
Upbound Group disclosed that hackers exploited stolen data to create $13 million in fraudulent Acima leases. The fintech company's security breach gave threat actors access to customer information used to establish fake lease accounts.