The awesome bag company only told us about our data getting breached after Cybernews went public. Why? Peak initially assumed it was a vulnerability, not a breach, and never followed up with Cybernews after plugging the hole. Cybernews never sent Peak the ransom note, both entities confirm to The Verge.

“Simply put, we weren’t aware of the data compromise until [June 4th,]” Peak’s CEO tells me.