Manifesto · October 2026
When a company has the worst week of its life, every institution around it does its job correctly. The one job it actually needs belongs to no one.
Atilia exists to hold it. This is where that came from, in my own words.
The company in this story is a dairy cooperative: more than thirty farmers who get up before dawn, every day, so that everyone else has milk on the table in the morning. Two hundred people work for it, in the yard, on the lorries and in the office.
Not long ago it was robbed. Not at night with a van; the modern way. Criminals locked up its computers: the invoicing, the machines that weigh the lorries, the system that records what time people arrive in the morning. On a Tuesday, none of it turned on.
I expected that when a company is attacked, there is somewhere to call. Some part of the system that exists for this. You report it, and something begins. I was wrong about that, and being wrong about it is where this project comes from.
They reported it. The police took it seriously and did what the police do, which is investigate a crime. But investigating a crime and getting a company running again by Thursday are not the same activity, and only one of them was going to happen. Nobody arrived. Nobody was going to.
To get the data back, money had to be moved. The bank blocked it, and the bank was right. A sudden company transfer to a cryptocurrency exchange is exactly what a bank should stop, and most of the time stopping it protects somebody. The rule was working as designed. It just happened to be pointed at a company that had been robbed and was trying to recover.
In the end the money went through a personal account, because no proper route existed in time.
Afterwards I tried to work out who had failed. Nobody had.
| Who | What they did |
|---|---|
| Police | Investigated a crimeYes |
| The bank | Blocked a sudden transfer to a crypto exchangeYes |
| IT supplier | Did IT workYes |
| No one | Get two hundred people working againNobody’s job |
One Tuesday can look like bad luck. Counted up, it looks like a routine.
Every number here is a floor.
Official figures count only what gets reported. Leak sites mostly name organisations that refused to pay. Companies that pay, like the cooperative in this story, mostly never appear anywhere.
When the FBI got inside one ransomware gang’s systems in 2022, it found that only about one in five of its victims had reported the attack to the police.
FBI Director Wray · January 2023 ↗None of them had this job: this company is down, two hundred people cannot work, get it back.
In a large company, this job has a name. A head of security who wrote the plan before anything happened. A response firm on call. An insurer with a hotline, and a negotiator who knows how to move the money.
A dairy cooperative of two hundred people has none of that. The job exists. It just doesn’t exist at their size. So the company fell through the middle of a system where everybody was doing their part.
Once you notice that shape, you see it everywhere.
Most of the worst situations people find themselves in are not caused by someone failing. They are caused by a gap between people who are each succeeding.
The company was not unprotected because it was careless. It was unprotected because knowing what to do required knowing a dozen things at once, technical, legal, financial and procedural, and no business of two hundred people has all of that in the building. Nor should it have to. Its business is milk.
That gap is not about intelligence or effort. It is about repetition, and you cannot acquire repetition during the event.
But a machine can hold repetition. It is the one thing a machine is genuinely good at: having been through something ten thousand times and knowing what the next hour looks like.
Police, banks and IT suppliers should keep doing exactly what they do. The failure lives between them, so that is where the fix has to live.
Repetition cannot be bought during a crisis. Anything that has to be called, briefed and sent for arrives after the hours that matter.
A dairy cooperative should not need technical, legal, financial and procedural expertise on staff to get through a Tuesday.
In the first hour, knowing which question to ask first is worth more than knowing everything.
Whatever holds the middle has to be there when the person who normally handles things is asleep.
Atilia works alongside the institutions. It does the one job none of them has.
Not another security product. Not a service where I am the expensive person who arrives.
Something a company like that one can have in the building already, before anything happens. It knows what the first hour requires and what the second day requires. It knows which questions matter, and in what order.
Still there when the person who normally handles things is asleep, and the general director is standing in front of a screen he does not understand.
The institutions will keep doing their parts. I don’t want to replace any of them. I want to build the thing that holds the middle, because at the moment nothing does.
I don’t know if this works. It might be too hard. It might be that companies will not pay for something until after the week they needed it, which is a well-known way to go out of business.
But I know where it came from, and I would rather you had that.
It came from standing next to a company on the worst week it had ever had, watching everyone involved do their job correctly, and realising that the thing they actually needed was nobody’s job at all.