Sunrise Company

Sunrise Company determined that an unauthorized actor acquired files from its network after suspicious activity was detected. Once an attacker can move from presence to acquisition, the system has failed at more than prevention; it has failed to constrain what unauthorized access can do. Good security assumes compromise happens and designs the blast radius accordingly.