Ask HN: Whistle blowing when PII isn't protected?
Increasingly, vast amounts of personal information are being lost in data breaches. I know, from experience, that in a lot of cases the development team was well aware of unacceptable levels of risk long before the breach happened, but could not raise these concerns past management. Management who either didn't care or didn't understand. Not just people doing a bad job with new code, but...