Good question. I'm intentionally leaving it vague to see what people come up with.

Also, I've seen what you are describing a few times. Usually happens in companies with certain financial incentives to hide "problems"

Yeah, I hoped someone would show up looking for a hacker in the "I wrote a SIEM rule so good it got me fired" sense, but life isn't a television show and there are rarely happy endings for good deeds.

(It wasn't a business -- that's what makes it worse. I can choose not to give someone money, but I can't refuse to transact with "The State", so any security issues are compounded.)