Former cyber executive turned whistleblower accuses IBM of covering up several data breaches

A former cybersecurity executive turned whistleblower has filed a lawsuit accusing IBM of failing to disclose several alleged data breaches in the mid-2010s. The suit claims IBM and two subsidiaries were affected and that the company actively worked to cover up the incidents.

If substantiated, the allegations could raise questions about IBM’s historical breach disclosure practices and corporate governance. The case also reflects growing scrutiny of cybersecurity transparency as regulators, customers, and investors demand faster and more complete reporting of security incidents.

IBM and two of its subsidiary companies were allegedly breached during the mid-2010s — a lawsuit filed by a former cybersecurity executive accuses IBM of not disclosing and actively covering it up.