A high-profile whistleblower has come forward with allegations that IBM and two of its subsidiaries, IBM Security and Global IT Services, concealed devastating cyber attacks on customers worldwide. According to the lawsuit filed earlier this year, which was obtained by our publication, the attacks were carried out between 2010 and 2015. The attacker allegedly exploited vulnerabilities in IBM's flagship Linux operating system, leaving hundreds of thousands of users' data at risk.
The whistleblower claims that IBM initially failed to disclose the breach and instead actively covered it up. This is alleged to have occurred despite the company's failure to promptly notify affected customers, who were subsequently forced to pay for new software and hardware to mitigate further damage. The lawsuit also alleges that IBM knowingly denied access to its internal systems to external auditors and investigators, further exacerbating the crisis.
The allegations against IBM are severe enough to warrant renewed scrutiny of the company's security practices. As a leader in the tech industry, IBM has long been touted for its commitment to customer protection and data security. However, the whistleblower's claims suggest that this commitment may not have extended as far as it should have during this critical period. The lawsuit is currently being investigated by regulatory authorities, and if proven true, could result in significant financial penalties and reputational damage for IBM.
