I'm sorry, when someone says "This is not an issue with Y" when Y is down, I don't believe them, especially if they've had problems with being sufficiently transparent in the past.

Come to think of it, I don't know if ANY response to any cyberattack involved full transparency from the victim.

Oh well, one of the benefits of doing mostly digital is that you can upload your massive .adif logs to any number of websites (and you should!) for redundancy.

@KO4ERE The major issues I see is that when these orgs get targeted and subsequently pwned, they a) have no continuity of operations plan that is in-place, trained, and exercised; and b) they do not describe what their duties and responsibilities to their customers/members are, with respect to their failure to protect sensitive data.