A rather interesting story has been developing in Information Security over the past few months.
SC Media | SolarWinds defendants bemoan trend where any calamity that befalls a public company is framed as a violation of the securities law (scmagazine.com)
https://www.scmagazine.com/analysis/supply-chain/solarwinds-defendants-claim-trend-where-any-calamity-that-befalls-a-public-company-is-framed-as-a-violation-of-the-securities-law
“Defendants in a class action lawsuit against SolarWinds following the hack of their Orion management software pressed a Texas judge to throw out the case, alleging the plaintiffs have not alleged or proven any malicious intent by the accused parties to mislead or deceive investors.
The lawsuit, brought by various SolarWinds (Links to an external site.) investors, claims the company neglected cybersecurity in the years leading up to the hack, both due to the leadership of then-CEO Kevin Thompson and chief information security officer Tim Brown. Further, it claims that two private equity firms played a key role stripping down SolarWinds security budget for short-term profit.
Seven Things MSPs Should Know Before Filing a Lawsuit Against Kaseya for the Recent Ransomware Attack Scott & Scott, LLP (scottandscottllp.com)
“As most MSPs have likely heard, Kaseya and many of its customers recently experienced a wide-spread ransomware attack. As victims are learning more about the potential impact of the attack, many are evaluating whether they can hold Kasey legally responsible for any damages that were incurred. Before rushing to the courthouse, MSPs should review the Kaseya license terms, including the reseller terms, and their agreements with their end users. Here are seven things for MSPs to consider when performing their litigation analysis.”
Give the 2 articles a full read and find 2 additional articles, news sources, or media on the subject.
Respond with these 2 articles and answer the following questions:
Are you, as a consumer and possibly client of both companies, concerned with how these breaches were handled?
What do you think MSPs could have done to protect themseleves better?
What responsibilities do executives and leadership have for these issues?
What would you have done as an MSP? Kaseya? Solarwinds?
