IBM's Shady Past Exposed

A former high-ranking cybersecurity executive has come forward with explosive allegations against IBM, accusing the company of covering up multiple data breaches and failing to notify authorities or customers.

A lawsuit unsealed this week but filed in 2020 alleges that IBM's core network was hacked by Chinese hackers between 2013 and 2016, and that the company covered up the breaches and never disclosed them. The whistleblower, William Barlow, who was IBM's vice president of threat intelligence until August 2019, claims that at least two IBM subsidiaries were also breached, and that IBM covered up those breaches as well.

According to the complaint, the alleged breaches date back more than a decade, and involved multiple foreign state actors. Barlow alleged that data was frequently stolen, and government agencies were 'never notified.'

The allegations are significant, given that IBM is a major cybersecurity vendor to the U.S. federal government, which makes the alleged concealment especially egregious. In recent years, several data breach notification laws have been passed to counter this problem.

IBM spokesperson Miki Carver declined to answer specific questions about the lawsuit and the underlying accusations, stating only that 'this complaint was filed six years ago, and the U.S. Department of Justice declined to intervene. IBM is confident that our actions followed the letter of the law.'

However, Barlow's accusations paint a disturbing picture of a company that prioritized secrecy over security and transparency. The allegations also raise questions about the company's commitment to cybersecurity, given its role as a major vendor to the U.S. government.

• The alleged breaches involved multiple foreign state actors, including a Chinese government-linked group called APT 10.
• Barlow claims that IBM's core network was hacked between 2013 and 2016, and that the company covered up the breaches and never disclosed them.
• At least two IBM subsidiaries were also allegedly breached, and Barlow claims that IBM covered up those breaches as well.
• The company failed to notify authorities or customers about the breaches, despite the fact that data was frequently stolen.
• Barlow alleges that government agencies were 'never notified' about the breaches, despite the fact that they were aware of the hacking campaign.

The allegations against IBM are a reminder that even major tech companies can be vulnerable to cyber threats, and that secrecy and transparency are crucial in the face of such threats. As the technology industry continues to evolve, it is essential that companies prioritize security and transparency to protect their customers and the public.

'You can't sell cybersecurity to the federal government while allegedly having these security problems within your own company,' said Jason Brown, a lawyer representing Barlow.

The alleged breaches also raise questions about IBM's role as a major vendor to the U.S. government. If the allegations are true, it is clear that the company has a long way to go in terms of prioritizing security and transparency.

• IBM has a history of prioritizing secrecy over transparency, which has led to allegations of cover-ups and lack of accountability.
• The company's role as a major vendor to the U.S. government raises questions about its commitment to security and transparency.
• The alleged breaches highlight the need for greater transparency and accountability in the tech industry.

The allegations against IBM are a wake-up call for the tech industry, and a reminder that companies must prioritize security and transparency to protect their customers and the public.