Book a Security Consultation
Subtitle Icon
Blog Author
Dipan Mann, Founder and CEO of CLOUDSKOPE

Dipan Mann

Founder, CEO & CTO

Dipan leads CLOUDSKOPE’s forensic cybersecurity audits and SARTUS™ remediation for private equity sponsors, boards, CFOs and general counsel. If something here looks like your environment, talk to our advisory team.

$2.2M wire fraud preventedsince May 1, 2026
Cited by KrebsOnSecurity
Keynote, CRN XChange Security 2026
Board, The Channel Company

Dipan Mann is the founder and CEO of Cloudskope, an elite cybersecurity consulting firm that works with private equity sponsors, portfolio companies, boards, CFOs, and general counsel.

He began his career in the public sector. Before founding Cloudskope he held senior technology and customer experience leadership roles at LogicMonitor and LiveVox. He serves on the board of The Channel Company.

He writes most of what appears on this site: breach analysis, M&A cyber due diligence, and the questions boards should be asking before a deal closes rather than after. The recurring subject is the distance between assumed security and actual security, and who is holding the liability when the two turn out to be different.

Cloudskope is headquartered in Dallas and works with clients nationally. Connect on LinkedIn.

Latest analysis

Breach analysis and board risk, by Dipan Mann

Blog Thumbnail
Blog Meta Icon
September 22, 2026
Blog Meta Icon
35 min read

Elsevier Was the Name on the Page. RELX Was the Pattern.

The page was staged Sept 2. The FBI named the credentials in July. LexisNexis, Elsevier's sister company, was breached by the same network in February. RELX has disclosed none of it.

Executive Risk & Board Advisory
Blog Thumbnail
Blog Meta Icon
September 21, 2026
Blog Meta Icon
4 min read

Is Sherpath Hacked? What Happened to Evolve and Elsevier on September 21

Evolve, the sign-in door for Sherpath and HESI, redirected to an extortion page for about two hours on Sept 21. What happened, and what to do if you signed in.

Executive Risk & Board Advisory
Blog Thumbnail
Blog Meta Icon
August 31, 2026
Blog Meta Icon
8 minute read

Nutex Health Filed Under 8.01. Seven Days Later It Filed Under 1.05. The Class Action Landed in Between.

Nutex Health filed a cyber incident under SEC Item 8.01, then converted to Item 1.05 seven days later. A class action arrived in between. What the sequence means for boards.

Executive Risk & Board Advisory
Blog Thumbnail
Blog Meta Icon
August 31, 2026
Blog Meta Icon
10 minute read

Fifteen Months, One Phone Call: How the Same Attack Went From Marks & Spencer to Apollo Global Management

The same attack technique ran from UK retail in April 2025 to Wall Street in July 2026. Fifteen months, public the entire time, and the controls that stop it are neither new nor expensive.

Executive Risk & Board Advisory
Blog Thumbnail
Blog Meta Icon
August 30, 2026
Blog Meta Icon
9 minute read

How a Phone Call Beats MFA: Anatomy of the Wall Street Vishing Wave

Anatomy of the vishing wave hitting Wall Street: how a phone call captures the authenticated session MFA produces, the indicators to hunt for, and the controls that close the exposure.

Executive Risk & Board Advisory
Blog Thumbnail
Blog Meta Icon
August 30, 2026
Blog Meta Icon
12 minute read

Apollo. Blackstone. Bridgewater. Bain. The Same Crew Is Vishing Them All — And Bain Is Already a Defendant.

Apollo, Blackstone, Bridgewater, and Bain Capital are all in the crosshairs of the same vishing campaign. Bain is already a defendant in the first sponsor-liability ruling. Two-front war on PE.

Executive Risk & Board Advisory
Confidential advisory call

Seeing the same pattern in your environment?

Book a call with our advisory team. Bring the deal, the tenant or the wire request that looks wrong. All engagements are confidential.