Post #2318751

2026-04-22 18:55 UTC

@gnyman@infosec.exchange @sawaba@infosec.exchange For security to become a core priority in most places the cost of the security incidents will need to outweigh the cost of the security program. So far the market cost of incidents doesn't seem to be enough.

Replies (2)

@sawaba@infosec.exchange 2026-04-22 21:07

@averagesecurityguy@infosec.exchange @gnyman@infosec.exchange Exactly. And to that point, I just built a website for the "destroyed by breach" list I've been maintaining for 10 years now. Only 32 companies, that I know of, have ever gone out of business due to a breach or cybersecurity incident. They were all small. https://destroyedbybreach.com

Open ##2318752
@gnyman@infosec.exchange 2026-04-23 05:32

@averagesecurityguy@infosec.exchange @sawaba@infosec.exchange yeah I agree with you both on why incidents don't fix anything, if we disagree on something it's maybe if AI will cause enough incidents to lead to a change or not, I don't think so, I think it will cause incidents and companies will put some policies in place to keep the amount just below the critical line.

Open ##2318754