Travis Drobbin

Over the last several days, Massachusetts communities have been warning residents to change passwords after a ransomware attack against the OnSolve CodeRED emergency alert platform exposed personal data and forced systems offline. Cambridge public safety agencies, for example, have notified residents that names, addresses, phone numbers, and passwords linked to CodeRED profiles may have been compromised and are urging immediate credential changes.​ For Greater Boston and Metro West leaders, this isn’t just a “vendor problem” – it is a preview of how quickly a third-party SaaS issue can ripple into public trust, cyber insurance exposure, and real-world safety risk. 🚨 Lightpath helps municipalities, K‑12 districts, and regional healthcare systems reduce this blast radius by pairing high-capacity private fiber with DDoS mitigation and managed security services, so critical applications don’t live solely at the mercy of a single cloud platform.​​ 🔒🏛️​​Re-architect connectivity for city halls, PSAPs, and public safety campuses using private Ethernet and Dark Fiber that isolate core systems from public-facing services, limiting how far stolen passwords or compromised accounts can travel. 🔁☁️​​Use SD‑WAN and Cloud Connect to build multiple secure paths into regional data centers and cloud providers, giving towns from Cambridge to Metro West the ability to pivot quickly if one alert or messaging platform is disrupted. 📶🛡️​​Add DDoS Shield and Managed Security to protect resident portals, school systems, and online payment sites from the follow-on attacks and credential-stuffing campaigns that often hit after a major breach goes public. As investigations into the CodeRED ransomware incident continue, Boston-area agencies have a narrow window to upgrade from “trust the vendor” to assume breach, design for resilience – starting with the fiber and security stack underneath every critical application. 🔐📡 Message me to learn more.​​ #CyberSecurity #CloudComputing #DigitalTransformation

1

📝 Connecticut privacy law, another round of updates 📝 Connecticut’s at it again, amending its privacy law before most businesses even caught up with the last version. This new update to the Connecticut Data Privacy Act (CTDPA) kicks in July 1, 2026 and makes the law a lot broader, more detailed and a bit more burdensome (depending on how ready you are). What’s new?? Short recap: - More companies will be in scope; The threshold dropped from 100,000 to 35,000 consumers. Big difference. - Profiling and inferences; Now a consumer can ask if you’re profiling them or making assumptions with their data… and challenge it. - Stronger rights + more transparency; From who you sell data to, to how you use it for ads or training LLMs… it needs to be in your privacy notice. - Sensitive data now includes even more; Think biometric, financial, gender identity, neural data and even your browsing info if you’re a minor. - New impact assessments; If your profiling leads to a “significant effect” you’ll need to document it. So, more rights, more complexity. A louder call for real privacy governance. And if you think these changes are just local to Connecticut... think again. This is part of a larger pattern we’re seeing across the U.S. more nuance, more enforcement, more expectations. Now’s the time to get your privacy house in order. Especially when laws keep shifting under your feet. #dataprivacy #CTDPA #compliance #privacyupdates #usprivacy #CMP #datagovernance

4

"How can CS be a revenue-driver when I can fire half my team and NRR stays the same?" Until Customer Success can find quantifiable evidence that they have a higher ROI than another AE hire, they'll always be a cost center. That's what happens when you solve for churn. You start playing not to lose. You meet with every account regardless of tier. You fret over each escalation, not by the amount of ARR at stake, but by how angry the account seems. Fear of conflict drives your decision-making. You have every customer insight at your fingertips. You have 360-degree customer intelligence. You reach out proactively at the first sign of trouble. But it doesn't make a difference. And it won't. Because the people who make CS tools are ALSO solving for churn. And CS can't be accretive with tools made for support and risk reduction. Just listen to the man himself: "Customer Success has gotten worse over the years. Much worse…We're seeing a fundamental shift where CSMs are expected to be revenue generators, but they're using systems designed for customer support." - Jason M. Lemkin If I'm honest, I'm kinda over Customer Intelligence. And I'm not even 100% sure what Commercial Intelligence is. We need Expansion Intelligence. #customerexpansion #nrr #customersuccess

9

9 Comments

It's true that in a few larger companies we've signed, compliance is just a box you tick, but I don't think this is the case for the vast majority of our enterprise customers. The spirit of obtaining ISO27001 or SOC-2 type 2 (and several others) is intended to demonstrate maturity within controls and processes of a supplier's processes (security, quality, privacy etc). Carefully planning work processes to fit the standards can take years to correctly implement, is iterative, is difficult, and usually requires a complete shift in mindset from "fake it until you make it" to "we're building something you can trust" which will be around in good times and bad. "Hacking it" to tick a box and close deals reflects that the startup is probably not ready to sell to enterprise. From a client's perspective, does "moving fast and breaking things" sound like a reliable vendor worth partnering with? Keep in mind that compliance is tip of the iceberg when it comes to meeting large customer expectations. After SOC-2, large customers will then want custom features, meetings, that you carry expensive insurance (usually more expensive than SOC-2 itself), a dedicated point of contact, SLA... careful what you wish for. As irresistible as it may be to initially go after the lucrative enterprise deals early on, depending on fewer, larger customers can be a fatal mistake if you can't accommodate their needs. I know many companies that relied on a few large accounts for revenue, with a single customer churning, their startups failed. Having many smaller, less demanding accounts can be the insurance policy that would enable you to compete for enterprise contracts without being reckless.

19

Churn doesn’t just leak revenue, it erodes valuation. In senior care M&A, retention is one of the few levers operators can influence before buyers ever enter the picture. When relationships transfer predictably, multiples expand. When they don’t, buyers price the risk immediately. If you’re scaling or preparing for exit, retention architecture isn’t optional — it’s foundational.

3

1 Comment

There are so many use cases for location data from Placer.ai. This case study shows how an agency used Placer to more than double the ROAS for a national retail client, which then went on to double its spend with the agency.

31

2 Comments

Canada 🇨🇦 I’m heading your way In June, I’ll be at DSA Canada Connect 2026 and I want to talk about something I’m seeing across almost every Direct Selling company right now: the massive AI acceleration gap opening up. On one side: companies moving fast, solving real problems, building capability. On the other: companies stuck in planning mode, waiting for the “right” strategy. The difference isn’t technology. It’s action. In my session, I’m going to run you through something we’ve done with many of the 20+ direct selling companies we work with, something that accelerated their progress significantly. You’ll learn: → Where you are right now (honestly) → Where your immediate opportunities are → How to lead this, regardless of your title or technical background → Real examples of what’s working and what’s not And we’ll tackle both sides of this transformation: the incredible capability AI unlocks AND the very real risk it poses to human connection at the absolute heart of direct selling. It’s my first time in Canada (getting in a week early to explore), and I can’t wait to help you get on the right side of the acceleration gap. Thanks to Peter Maddox for inviting me and Ben Robinson for recommending me. If you’re there, see you in June!

32

2 Comments

Your cyber insurance premium just jumped 75%? Here's why Identity & Access Management is now the #1 required control for qualification – and how smart organizations are turning IAM maturity into premium savings. The math is simple: $375K additional annual cost vs. $200-300K IAM investment with Year 1 ROI. Time to flip the script on identity governance. 💡 #CyberInsurance #IAM #IdentityManagement #CyberSecurity #CISO #RiskManagement #InfoSec #DigitalIdentity #ZeroTrust #CyberRisk

9

Most data risk doesn’t start with a breach or a lawsuit. It starts much earlier, in everyday decisions made without a full picture of the data. When visibility is fragmented, even reasonable choices can quietly add up to real exposure.

4

1 Comment