I actually have worked in security at startups my entire career. Before the tons of negative HN posts get posted. 2 things. First, hug ops. I've been there bef

I actually have worked in security at startups my entire career. Before the tons of negative HN posts get posted. 2 things. First, hug ops. I've been there before and will be again OneLogin. Same day notification and detected it by yourself is so great. It sounds very positive. Transparent and publicly acknowledging the issue as soon as possible. More information will come out people, it takes days or weeks to put together the whole story. Take notes. Don't try to wait, folks. The first thing you should be doing after mitigation is figuring out how to communicate with your customers. I'm excited to read more as they learn more, but so far they are handling this very well.