A former IBM cybersecurity executive accused the company in a lawsuit of concealing multiple breaches, including intrusions that he said were carried out by foreign governments.
The lawsuit, unsealed this week but filed in 2020, was first reported by Bloomberg. William Barlow, IBM’s former vice president of threat intelligence until August 2019, said IBM concluded that Chinese hackers breached its core network between 2013 and 2016, then did not disclose the incidents. He also alleged that IBM failed to disclose breaches involving at least two subsidiaries.
Barlow alleged that IBM’s core network was “routinely hacked by foreign state actors and others,” that data was repeatedly stolen, and that government agencies were “never notified.”
According to the complaint, an international investigation found APT10, a group linked to the Chinese government, may have breached IBM’s network more than 56,000 times between 2013 and 2016. An IBM spokesperson said IBM could not investigate further because it had not kept logs showing who accessed its network and when. The representative also alleged that IBM did not alert authorities or the U.S. government.
According to the complaint, IBM’s investigation found four compromised servers. It also cited an internal IBM report that said, “The attackers have compromised and/or accessed nearly 400 compromised accounts and almost 200 total systems and servers across every IBM business unit, eighteen countries, and multiple IBM products.”