Ex-incident responder: the hack rarely sinks companies — the cover-up does
mattshumer_ · x · 2026-10-26
Matt Shumer amplifies security expert Dassie Spivack's thesis: after years of helping companies recover from breaches, she found the hack almost never sank them — the cover-up did. Teams instinctively wait for more information or a perfect statement, and the delay is what proves catastrophic. Key example: in 2016 Uber paid hackers $100K to delete stolen data and stay quiet, labeling it a bug bounty; when the truth surfaced a year later, Uber paid $148M to settle with all 50 states and its former security chief was criminally convicted. Shumer predicts the young account will be one of the biggest cybersecurity follows of the next 12 months.
More from Safety
- OpenAI, Wiz and Calif independently found the same PHP vulnerability hitting 70% of websites — thursdai_pod · 2026-10-26
- Anthropic quietly restricts Claude's reverse-engineering ability, sparking open-model debate — jdjohnson · 2026-10-26
- A decoy MCP server got hit by 7 AI tools in 7 minutes — 4 asked for the full tool list — KnowledgeOk7634 · 2026-10-26
- Redditor reports suspicious $0 transactions from OpenAI OpCo on their card — SpareImpression3155 · 2026-10-26
- mcp-warden: local MCP proxy keeps secrets in OS keychain so agents never see tokens — Relevant_Mousse_9117 · 2026-10-26
- Computer use could rotate API keys, but models refuse—safety making us less secure — AaronBergman18 · 2026-10-26