Audit Finding #1: A company that sells cybersecurity services allegedly failed to disclose its own breaches from the mid-2010s. The paperwork shows multiple subsidiary incidents that stayed buried until the lawsuit arrived.
Audit Finding #2: The former executive turned whistleblower claims active covering up rather than quiet fixes. This is the equivalent of a fire department hiding smoke alarms because the paperwork looked messy.
Audit Finding #3: IBM's defense rests on timing and definitions, not on proving the incidents never happened. When your product is trust and your evidence is semantics, the verdict writes itself.
Devastating Verdict: A cybersecurity vendor that treats its own breaches like classified documents has confused client security with corporate self-preservation.
