Ubiquiti Networks Breach

Re:Ubiquiti Networks Breach by hsbauauvhabzb on Monday January 11, 2021 @03:47PM (#25736543)

They opted to TELL people about it which is a good indicator. I’m sure there’s many companies who choose not to (which may be against the law). It’s also HR spin on the topic, but iirc ubiquity offer bug bounties on a range of devices they sell so there’s at least some truth to the spin.

‘We know they breached but don’t know what they did’ is an interesting statement. One POV is that they didn’t have sufficient logging and segregation to determine how widespread the breach was, the other is that they’re not arrogant enough to think their SIEM adequately captures everything.

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by jlgaddis on Monday January 11, 2021 @04:18PM (#25737214)

> They opted to TELL people about it which is a good indicator.

Aren't they based in California which, if I remember correctly, as a law requiring them to notify the victims of a data breach?

Would they still have chosen to in the absence of such a law? We'll never know, I guess.

[ Parent | on HN ]

Re:Ubiquiti Networks Breach by ziddoap on Monday January 11, 2021 @03:51PM (#25736639)

I'm unsure how your statement is meant as a response to mine. I obviously agree that it is a good indicator that they notified customers of a breach.

[ Parent | on HN ]