Former Cyberint Chief Accuses IBM of Concealing Multiple Breaches

Colleagues, I want to draw attention to a cybersecurity matter: a former IBM VP for threat intelligence has sued, alleging the company concealed a series of intrusions.

- He claims APT10 repeatedly breached IBM's core network from 2013–2016; an internal review reportedly notes over 56,000 incidents and missing access logs.
- He alleges subsidiaries (Trusteer, Truven) and infrastructure run with AT&T were affected, with no notifications to authorities.
- IBM says the suit is time‑barred, the DOJ did not intervene, and the company acted lawfully.

Why it matters: if a security provider hides incidents, client and government trust is undermined.

What regulatory and client actions do you consider appropriate?

#cybersecurity #databreach #compliance #infosec