That, and 280 or so company reviews, conversations with compliance officers, CISOs, auditors, pentesters, lawyers and other people in the M&A space about how those companies deal with security issues, reports and what constitutes a potential breach and what does not.

As for the absolute facts of the law: the only law I currently have in mind is the GDPR and that is a surprisingly readable piece of legislation.

▲

akerl_ a day ago | parent [-]

So I should expect a news post about Lovable owing GDPR fines for failure to disclose a breach any day now?

▲

jacquesm a day ago | parent [-]

Quite possibly. If you are a data subject affected by this affair you can contact your local DPA.

	▲	akerl_ 8 hours ago \| parent [-]
		And if I don’t see fines against Lovable and they don’t report this as a breach, it would seem to suggest that your stance across this post isn’t the degree of absolute fact you’ve presented it as?