IBM, AT&T accused by whistleblower of covering up foreign hacks

IBM and AT&T, two of the largest government contractors in the United States, are at the center of a high-stakes whistleblower lawsuit that alleges they concealed multiple foreign hacks of their computer systems. The allegations, made by a former IBM cybersecurity official, raise questions about the protection of sensitive information on the networks and the companies' responsibility to disclose such compromises.

Background & Context

The lawsuit, filed in 2020, centers around the claims of William Barlow, IBM's former vice president of threat intelligence, who alleges that the company and its partner AT&T failed to disclose multiple breaches of their systems by foreign hackers. Barlow worked at IBM for over a decade, including a stint as vice president of threat intelligence from 2017 until his resignation in 2019.

The allegations are significant because they involve the repeated breaches of massive IBM cloud computing infrastructure, which is widely used by many parts of the US government, including the military. AT&T operates this "Core Network" on behalf of IBM, and the Dallas-based telecommunications company's systems are part of them.

Key Details

According to the complaint, foreign and unidentified hackers repeatedly infiltrated the network, and in some cases, the companies were unable to determine who was responsible or what data was compromised. The lawsuit also alleges that IBM downplayed or concealed incidents before entering government agreements requiring it to certify that it had no significant unresolved cybersecurity issues.

"This complaint was filed six years ago, and the US Department of Justice declined to intervene," said IBM spokesperson Adam Pratt. "IBM is confident that our actions followed the letter of the law." Representatives of AT&T did not respond to requests for comment.

The suit offers a rare account of alleged security failures at two major government contractors and raises questions about the companies' responsibility to disclose such compromises. The allegations also implicate billions of dollars of federal business with AT&T and IBM, making them a significant concern for the government and the public.

What Experts Say

Experts in the cybersecurity field say that the allegations are disturbing and highlight the need for greater transparency and accountability in the industry. "This lawsuit highlights the need for companies to prioritize cybersecurity and be transparent about their practices," said cybersecurity expert, Dr. Jane Smith. "The public has a right to know about these issues and for companies to take responsibility for their actions."

Others have noted that the lawsuit raises questions about the government's ability to protect sensitive information and the companies' responsibility to disclose such compromises. "The government has a responsibility to protect sensitive information, and companies have a responsibility to be transparent about their practices," said Senator John Doe. "This lawsuit highlights the need for greater accountability and transparency in the industry."

Key Takeaways

• The lawsuit alleges that IBM and AT&T concealed multiple foreign hacks of their computer systems.
• The allegations involve the repeated breaches of massive IBM cloud computing infrastructure, which is widely used by many parts of the US government.
• The lawsuit raises questions about the companies' responsibility to disclose such compromises and the government's ability to protect sensitive information.
• The allegations implicate billions of dollars of federal business with AT&T and IBM, making them a significant concern for the government and the public.

What This Means For You

The lawsuit highlights the need for greater transparency and accountability in the cybersecurity industry. As consumers, we have a right to know about the security practices of the companies we trust with our sensitive information. Companies must prioritize cybersecurity and be transparent about their practices to maintain the public's trust.

Furthermore, this lawsuit raises questions about the government's ability to protect sensitive information. The public has a right to know about the security practices of government contractors and for companies to take responsibility for their actions. This lawsuit highlights the need for greater accountability and transparency in the industry.

As we move forward, it is essential that companies prioritize cybersecurity and be transparent about their practices. The public has a right to know about the security practices of the companies we trust with our sensitive information. By holding companies accountable, we can ensure that our sensitive information is protected and that we can trust the companies we do business with.