

From what I can find, the Linux Mint website was breached once, in 2016, for a short duration and during that time the download link for the ISO referred to a site that was hosting a version that installed a backdoor.
Meaning it was short in scope, the dev team reacted to it, handled it, and then were open and transparent about it, and it only affected people who downloaded the ISO at that exact span in time and also installed that version instead of replacing it when the announcement came.
The harsh reality of IT security isn’t that it’s a question of if you get hacked, it’s a question of when, even for multi-billion dollar companies.











Sell two, wait until the crash, and upgrade for less money. Win-win!