No. Not an act of war: an act of embarrassment. Merck should be shamed.

Can we stop calling these things "cyber attacks" or "hacks"? I think "gross negligence on applying even basic information security" and "a focus on security theatrics" fit much better.