Should Individuals Have the Right to Disclose Cybersecurity Breaches?

The author of the post works in a field where confidentiality is crucial but questions whether this confidentiality should extend to serious cybersecurity incidents, especially when large companies, sometimes in coordination with government entities, choose not to disclose these vulnerabilities to the public. The author wonders if there should be protections allowing individuals to reveal such incidents to the press without facing consequences. The author also notes that believing all cybersecurity breaches eventually get revealed is naive.