The Vendor You Cannot Name | Lens Four by Sean Martin | Read by TAPE9

About this episode

The episode discusses a breach involving unnamed third-party vendors and the implications for CISOs.

Two U.S. banks disclosed a breach at the same unnamed third-party vendor in April 2026, with six class action lawsuits in two weeks. A regulatory clock about to start at suspicion, an NYDFS letter telling covered entities exactly what to do, and an insurance underwriter asking the same questions — Lens Four works through what the disclosure language is leaving out and what carries a CISO through the moment a vendor they cannot control fails on their watch.

People in this episode

Host: Sean Martin

Topics covered

• cybersecurity
• vendor management
• data breach
• regulatory compliance
• insurance
• CISO challenges

Keywords

• cybersecurity
• vendor breach
• class action lawsuits
• regulatory compliance
• CISO
• insurance underwriter

Mentioned in this episode

Organizations: U.S. banks, NYDFS, TAPE9

More episodes of Redefining CyberSecurity

• Proof of Impact | Lens Four by Sean Martin | Read by TAPE9 · June 1, 2026 · 11 min
• When Patient Records, Powerlines, and Prompts All Lead to the Same Risk | A Redefining CyberSecurity Podcast Conversation with Gil Bashe, Chair, Global Health and Purpose of FINN Partners · May 29, 2026 · 32 min
• Who's Managing Your Agent Workforce? (And Whose Budget Are They On?) | Lens Four by Sean Martin | Read by TAPE9 · April 21, 2026 · 31 min
• DriveThru Hacking: When Your Dashcam Becomes the Attack Vector | A Redefining CyberSecurity Podcast Conversation with Alina Tan and George Chen · April 15, 2026 · 31 min
• You're Still Reading the Advisory. The Attacker Already Left. | Lens Four by Sean Martin | Read by TAPE9 · April 14, 2026 · 16 min
• You Shot the Arrow. The Bow Went With It. | Lens Four by Sean Martin | Read by TAPE9 · April 8, 2026 · 15 min