On the CA story, I get where the guy is coming from with the “It was not a breach.” He’s a technical guy, and this wasn’t a technical hack. It’s like a lock manufacturer wanting to let everyone know that the customer had the door open, and their locks weren’t broken. But in this case, he wasn’t just a lock manufacturer, he was in charge of security for the home. I can’t help but think of Steve Jobs parable of the Jan…
If he's saying it wasn't a breach it's probably because it doesn't fit the actual criteria for considering something a breach, but doesn't mean he's trying to downplay the severity of what happened.
Edit: difference between a data breach vs. a security incident - https://www.alienvault.com/blogs/security-essentials/whats-t...