This is a good move, but still an inadequate response to what originally happened. It’s dogging deep questions about who had access to what data and just how bad the security controls were around startups’ sensitive information. Shutting down this bit of the business doesn’t put folks at ease that their information is still safe with Carta.

The Carta CEO has botched the response here multiple times now and this latest pass just comes across as an oops sorry we got caught, we won’t do that anymore response… but still dodging the hard questions on how data was being managed.