Surely they should be staffed to mount at least a minimal response to security incidents even over holidays?

A malicious actor wouldn’t wait until business hours.

Do you just love the idea of ruining someone's Christmas?

Experian is here to ruin everyone’s Christmas, that is kind of their gig to be Scrooge. Not a big Krebs fan, but I do enjoy watching him go against some of these big guys with a “Too bad, so sad” mentality. I can’t imagine having to tell someone that what I do for work is track an indebted populous, eck.

You’re aware that most people in the world don’t even celebrate Christmas?

So? Christmas is a public holiday in 80% of countries. It is by some distance the most widely shared global business holiday. And Experian is an American company.

It's a global company and yes some people have to work on holidays. Info Sec for a business like Experian absolutely necessitates 24/7 coverage. I can't believe this is even a debate.

There’s a big difference between getting paged over the holidays for a real incident vs getting paged because Brian Krebs wants to make some internet drama.