Hacks remain unreported

SecurityFocus: “Most companies believe that the PR cost of being identified in the media with weak security
is far greater than the damage most malicious hackers can inflict. We don’t know if that’s true or not,
but it is the prevailing sentiment.

“If you’re a publicly traded company, that can get really interesting because shareholder lawsuits are
a fact of life. The fact that you’ve ‘been had’ may have an effect on your stock prices; and if your
shareholders don’t like that then the company and the board may find themselves being sued, and
they won’t like that,” [Tom] Perrine warns.”