Regardless of his reporting at the time, Krebs has known since December when Sharp was arrested that:

- the supposed hacker was the goddamn Unifi Head of Cloud, using the access keys needed to do their job

- the initial internal investigation into the hack and ransom was being conducted by the attacker

- that the whistleblower account is a complete fabrication by the internal attacker and his reporting on a coverup are false

Ubiquiti aren't suing him for reporting on it, they're suing him for not retracting it properly once it was revealed how false it was. As per the filing:

70. Ubiquiti brings this litigation because of Krebs’s refusal to do the right thing and retract the March 30 article or the December 2, 2021 update, which continue to malign Ubiquiti’s reputation, damage its relationships with its stockholders, and disrupt its business operations.

Krebs and Corey are _way_ wrong on this.

There is plenty to be said and very valid criticisms about how Ubiquiti dropped the ball and handled the situation. The attack being an insider does not excuse them. But it invalidates much of the reporting.

Krebs was specifically and personally targetted by the attacker as a method of spreading false statements to damage the company and, by keeping the articles up, remains complicit and liable.