Delayed Disclosure of Data Breaches by Organizations

A significant portion of cybersecurity leaders have withheld reports of material security incidents from their boards or executive teams, often due to fears of punitive action or reputational harm, according to a VikingCloud survey. In a notable case, FinWise Bank disclosed a data breach affecting nearly 700,000 individuals more than a year after discovering the incident, leading to multiple class action lawsuits and scrutiny over regulatory compliance. Legal and industry experts warn that delayed or withheld breach disclosures can increase liability for executives and damage organizational trust. The FinWise incident underscores the risks associated with inadequate employee access controls and the importance of timely breach notification in line with legal requirements. Both the survey and the FinWise case highlight growing concerns about organizational transparency and the evolving regulatory landscape for breach reporting.