Re: "and previously told investors it had "completed" a security audit."
All a formal audit means is that they followed procedures and got ticked off as following procedures.
Nothing at all is done to check whether the procedures are appropriate, nor is it the auditor's place to say anything if they're not.
Biting the hand that feeds IT
