NETLOCK: Full Incident Report was not published within 14 days of notification

NETLOCK failed to publish a Full Incident Report within the required 14-day timeframe following an external notification received on December 27, 2025. This oversight was identified through a third-party report and was linked to a lack of enforced internal controls for tracking compliance with CCADB reporting deadlines. NETLOCK conducted a root cause analysis and implemented a new incident reporting system to ensure timely publication of reports in the future. The corrective actions included assigning accountability for report publication and introducing automated reminders. As of April 2026, the new system is operational, and NETLOCK has committed to ongoing monitoring and improvements.

1. 2025-12-27 External concern raised regarding NETLOCK's incident reporting compliance.
2. 2026-01-10 Deadline for publishing the Full Incident Report was missed.
3. 2026-04-13 NETLOCK completed corrective actions and requested closure of the incident.

1. 2025-12-29 Netlock — NETLOCK acknowledged the report and initiated an internal investigation.
2. 2026-01-12 Netlock — NETLOCK provided a Full Incident Report detailing the incident and corrective actions.
3. 2026-04-13 Netlock — NETLOCK submitted a closure report summarizing the incident and remediation steps.