A claimed source-code compromise at a security vendor. Code is not a signing key — but it is a map of the detection logic.
One of very few files here where the corpus can see both halves of the cost — the records and the stoppage.
No data involved, no system touched, no notification anywhere. The company simply could not trade.