A former IBM cybersecurity executive filed a lawsuit alleging that IBM and AT&T concealed repeated foreign hacker breaches from US government authorities, violating disclosure laws.
The whistleblower, a former cyber official at IBM, claims both companies experienced multiple intrusions by foreign hackers and actively covered up the breaches rather than reporting them to federal agencies as required by law.
According to the lawsuit, IBM and its subsidiary companies suffered breaches during the mid-2010s. The former executive alleges IBM failed to disclose these incidents and took steps to conceal them from government oversight.
The case highlights ongoing tensions between major technology companies and federal authorities regarding cybersecurity incident reporting requirements. Companies operating critical infrastructure or handling sensitive data typically face legal obligations to notify government agencies of significant security breaches, particularly those involving foreign actors.
The allegations suggest a potential pattern of non-compliance with federal disclosure requirements. If substantiated, such violations could result in significant penalties and regulatory consequences for both IBM and AT&T.
Neither company has issued public statements regarding the lawsuit at this time. The specifics of the alleged breaches—including the extent of data compromised, which foreign entities were involved, and the duration of unauthorized access—remain under legal review.
This case adds to a growing list of corporate cybersecurity incidents involving major US technology and telecommunications firms. The lawsuit raises questions about whether current disclosure mechanisms effectively capture and report foreign cyber intrusions to appropriate federal agencies.
The outcome may have implications for how major corporations handle breach reporting obligations going forward and could influence regulatory scrutiny of the tech and telecom sectors' cybersecurity practices.
Threat actors are deploying invisible Unicode characters in phishing campaigns to evade email security systems. The ASCII smuggling technique allows attackers to conceal malicious content from detection tools.
A Unicode block invisible to human readers has transitioned from an academic curiosity used to test AI systems into an active tool for spammers. The technique exploits characters that machines process but humans cannot see.
A study found that 86% of licensed British gambling websites violate GDPR privacy requirements, using deceptive cookie banners to track users before obtaining consent.
Berlin's government is intensively reviewing 5.79TB of state data released by ransomware group Rhysida after refusing to pay a ransom demand. The leaked files reportedly contain sensitive information on national defense and threat response plans.