This is your first week on the job after graduating

You work in the IT department of a large worldwide nonprofit/NGO, similar to the Red Cross.

You are the first one in the IT department to realize that your networks have been breached by a malicious actor who is stealing your information and clients' information and is also using your network to conduct cyberattacks in another country, destabilizing that country's government in what looks like a prelude to war.

Write the supervisor an update that can also be used as an update to the CEO of the NGO, expressing what could be done to mitigate the attack against the organization and perception that your organization is involved in the cyberattack.

Your CEO will not accept a full disclosure, though, as they believe admitting their networks were not secure will cost the company more in public opinion.

How does your NGO engage various stakeholders, including public, private, and world governments? What are the legal ramifications and the blowbacks for this event? Is there any upside for the NGO?