Client A signs a contract stating that he owns or is authorized to represent the owner of a Network. He asks a penetration testing company to crack it. After they crack it, recover the pass, tell him how to make it more secure; they find out it's not actually his network and now he has the password. Who is liable?
The contract they signed, says , among other things:
The client does hereby retain the provider for the purpose of providing Penetration Testing services on the client’s computers and/or Networks.
The client has provided the provider with certain required information regarding the scope and range of the tests and the client hereby warrants that all information provided is true and accurate and that the client owns or is authorized to represent the owners of the computers systems and networks described in Form A. The client further warrants and represents that he/she is authorized to enter into binding legal agreements.
