We have met the enemy, and he wants his allowance! What do the recent hacks perpetrated by the Lapsus$ gang tell us about the importance of vendor management, and about messaging by companies following a cyber event? Here, I discuss a few of the lessons to be learned.