Timing is everything

Two years, two weeks  –  what’s the diff?

Yahoo Data Breach Hits Millions,” The Wall Street Journal, September 23, 2016 A1.  Yahoo, the subject of a proposed deal with Verizon announced July 25, apparently had a major breach of its network two years ago, affecting upwards of 500 million users.  But in a proxy filing on September 9, Yahoo said it wasn’t aware of any breaches.

So which is it?  Did Yahoo not know for two years about the breach?  Did it not know two weeks ago?  Or did it forget?  $4.8 billion deal may turn on this point.  When did Yahoo tell Verizon?  Can you hear me now?

How many theories can you think of for individual director liability if this deal craters?  Failure to protect the assets?  Failure to inform shareholders?  Lying to the market? Fraud?


Leave a comment

Filed under Accuracy, Board, Communications, Compliance, Controls, Corporation, Directors, Duty, Duty of Care, Governance, Inform market, Inform shareholders, Internal controls, Investor relations, IT, Oversight, Protect assets, Protect information assets, Security

Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s