Fraser G

If Equifax was hacked earlier this year and Deloitte was last year, why are we just hearing about this now? Just curious – are their standards of revealing when the period of a hack more strict or less strict and why? Food for thought

Good question! Probably all managed by lawyers and PR specialists, who abide by whatever regulation is in place.

Neil,

The answer to this question is very important. In my opinion, these companies don’t want to announce these incidents at the time they get attacked, I think they like to know the consequences first and how much damage these attacks can result.

They are big organizations that deal with sensitive information all the time, they know the reaction of their clients who keep them having business won’t be good for their businesses. The impact of this announcement in the beginning of the year will be very bad since they companies like Deloitte start new projects in that time of the year. The impact will be very low if they announce these attacks in the end of the year.