Every major breach entered through a door someone left open.
Breach Brief is a weekly video investigation of the breaches that moved markets — reconstructed as boardroom case files: what happened, what it cost, and the decisions that would have stopped it.
The Case Files
Each episode is built from primary sources — SEC filings, congressional testimony, court records — and closed with the questions your board should be asking.
The MGM Resort Hack
A sub-ten-minute phone call to an IT helpdesk handed attackers valid credentials inside one of the world's largest casino operations. Caesars paid. MGM didn't.
The OpenCode Breach
A legacy system being decommissioned still held live AI provider keys. Someone found them — and other people's AI bills started paying for a competitor's training runs.
Change Healthcare
A legacy remote-access portal with no multi-factor authentication. Stolen credentials. The largest healthcare breach in U.S. history — and a final bill more than double the first estimate.
Three breaches. Three open doors.
Different industries, different attackers — the same failure pattern. None of them required breaking encryption. All of them required only an access path nobody owned.
1 · Legacy systems nobody retired
Decommissioned and inherited systems keep live credentials, live keys and live network paths — long after they leave the org chart and the audit scope.
2 · A helpdesk that couldn't verify identity
If a caller can reset credentials or enrol a new device with charm and publicly available details, your helpdesk is an access broker — not a control.
3 · Remote access without MFA
A single stolen password on a legacy portal was enough to start a $3.09 billion incident. Multi-factor authentication is not a feature. It is the lock.
The Open Door Audit Kit
The case files show how the failures happened. The kit is the working tool to find the same doors inside your own organisation — before someone else does.
- Legacy system & remote-access inventory workbook
- MFA coverage gap checklist for critical access paths
- Helpdesk identity-verification protocol and call script
- API key & secrets hygiene checklist
- Dormant vendor and contractor access review
- The 10 questions to ask your CISO on Monday morning
Priced for a Monday decision.
Register your interest and we will notify you at launch — founding pricing will be offered to the interest list first.
Register interestNo spam. One email at launch, one when it matters.
About Breach Brief
Breach Brief exists because the people who carry the financial and legal consequences of a breach — the CEO, the CFO, the board — are usually the last to get a clear account of how it actually happened.
Each case file reconstructs a major incident from primary sources and translates it into the language of the boardroom: exposure, cost, and decisions. No hype, no hacker mythology — the record, and what it means for your organisation.
If you run a company, advise one, or sit on its board, this is your weekly twenty minutes on the risk that now sits on your balance sheet.
- Format
- Weekly video case file
- Publishes
- Mondays & Fridays, 7:00 pm (El Salvador)
- Audience
- CEOs · CFOs · CISOs · Boards
- Sources
- SEC filings · testimony · court records