AI & Tech
Mandia recalls deciding to disclose FireEye breach despite no legal duty
Shawn Ryan Show
Kevin Mandia - The Man Who Exposed China's Military Hackers | SRS #328
"There was no legal obligation to go public about the breach. We didn't violate anything. We didn't lose any covered data by statute. And the lawyer is a great guy, incredible lawyer. And he gave the whole board a presentation on, you have no legal obligation to go public. And I had like 5 pages of notes and I was ready to fight my board with, I'm going public anyway, goddamn it, and here's why. They rolled over in 10 seconds."
Discussing the 2020 compromise of FireEye during the wider SolarWinds incident, Mandia says the company chose to go public even though counsel advised there was no legal requirement to do so. He describes rapid board agreement, while noting the financial and litigation risks of disclosure.
From this episode
Shawn Ryan Show