I would have expected this to be somewhere at the top right now given how deep the article digs and evidence seems legit.
Regardless, it's been an ongoing issue. I know a few involved companies — it takes basically 5 days to get a SOC 2 Type 2 report through Delve. And, of course, they market this way too: "SOC 2 in days". Unbelievable.
How did none of this come up during diligence? Feels like a prime example of too good to be true.
Fortunately, some of the old-YC spirit seems to be alive here on HN still.
I guess it is great if you're a grifter/scammer or looking to just sell off to a FANG.