Yes but they obtained this information based on the one-sided courtesy of another party, under a scheme that tried to get as many people to safeguard together.

If the first party to receive this information says, "Wow, of course I must act on this, because customers are on the line," then it makes sense to simply choose who you tell more carefully or not at all.

▲

MartijnHols 19 hours ago | parent [-]

If you saw customer data was being compromised; financial data, government data, electronic patient records etc, and you had the fix. Would you do nothing?

	▲	joepie91_ 19 hours ago \| parent [-]
		The alternative isn't "doing nothing". It's raising the issue in the coordination group so that everyone can collectively decide on a new timeline if necessary, and you aren't leaving everyone else hanging out to dry.