Microolap admits the break-in and disputes everything that would matter to its customers

The two accounts touch at one point, which is that someone was inside Microolap's estate ^[14]. Everything a buyer would need to know sits on the far side of the disagreement. Black Spark says more than a month of access and reach into EtherSensor ^[6]. Microolap says rarely used development systems hosted by another Russian provider, an outdated copy of its website, and an old Bitrix24 install ^[9].

Read the denial by its nouns. The company denies that the compromise gave attackers access to EtherSensor or to data belonging to customers and partners ^[10]. It also confirms that one of the systems reached was a customer management platform holding what it describes as a limited amount of data ^[9]. Both statements can hold at once only if "customer data" means something narrower inside the vendor than it does to the customer whose records were in that Bitrix24 ^[16]. The vendor's account also does not engage the claimed month of access, or say when the intrusion began ^[17], while chief executive Andrey Smirnov says the company's systems "worked as intended" and that it detected the incident ^[5].

The deletion claim is the part that can actually be settled, and not by Microolap. The attackers said they extracted and deleted data belonging to Russian Railways, the banknote and document producer Goznak, VTB Bank and its leasing subsidiary, and NEK.TECH ^[7]. Missing records are visible to the party that owns them. Five named organisations, and not one of them appears in the report saying anything ^[15].

Evidence on the attacker side is no stronger. The screenshots have not been independently verified ^[8], and the group publishing them describes itself as an underground movement in Russia whose members have chosen what a Telegram manifesto calls "armed resistance" ^[13]. That is a political posture, and political postures have an interest in a large number. Smirnov's request that people not treat the attackers' claims as fact is reasonable ^[4]; it is also an argument that applies in both directions.

What lifts this above a routine denial is what the company sells. Microolap builds software for intercepting and analysing network traffic ^[1]. A vendor in that business accumulates the paperwork of the job, meaning the record of which networks are watched and how the watching is set up. A customer buying visibility hands over a description of where it cannot see. A stale website and a forgotten CRM at such a supplier are not the same class of asset as the same two systems at a company that sells office furniture, and the customer's exposure is not settled by the supplier's assessment being correct.