[dnbgfher]

Sure, maybe this was something beyond what could be reasonably prevented by a non-state. I don't think we know yet.

But they have a duty after the fact as well, to ensure the damage is minimized. That includes actually telling those potentially impacted what is known, etc.

[ineedasername]

This is true. It starts with China, it's their fault, but if your customers are compromised as a result they need know to protect themselves, or it spreads like a virus.

IBM is not to blame for the initial attack. But any further attacks that result from their silence can have a good share of blame laid at their feet.