They make them shout over and over "MANAGEMENT ALWAYS LIES, MANAGEMENT ALWAYS LIES, MANAGEMENT ALWAYS LIES".
That scene took place in the early 90's, and I can't imagine anyone thinks it's gotten better in regards to the ethics of top management, their understanding of technology, or their desire to participate in insider training.
I don't see anything exonerating in the timeline you described. You are making assumptions here that could excuse the executives if they were true. These are nothing but assumptions though.
Your hypothesis is predicated on the fact that you trust their timeline, and make assumption that type of events could have occurred within each groups at Equifax on those days..
Difficult to prove, but I too suspect itβs just bad timing.
Note that the three executives sold relatively small portions of stock: 13%, 9%, 4% of their respective personal holdings.
Selling stock the day before the news makes these guys seem like absolute criminals, but (a) it's not what happened and (b) the soundbyte doesn't represent what is likely the case.
The reality:
- Breach happened between March - July 2017
- Breach detected July 29th (A Saturday)
- Executives sold stock August 1 (A Tuesday)
- Breach announced September 9th (5 weeks later)
From the company's own statement, which you can BET was vetted by a lot of attorneys:
"Equifax discovered the unauthorized access on July 29 of this year and acted immediately to stop the intrusion. The company promptly engaged a leading, independent cybersecurity firm that has been conducting a comprehensive forensic review to determine the scope of the intrusion, including the specific data impacted."
I would bet, dollars to donuts, this is just terrible timing optically for the executives.
What is much more likely reality is that they detect breaches on a regular basis, and until the forensic team came back with the bombshell - likely many weeks later - of the scope of the data loss, the executives were not even informed.