Saudi government reportedly punished dissidents after McKinsey identified them
businessinsider.com
businessinsider.com
If it was an internal report, how did it get into the hands of the government?
First, a lot of companies in the US loved to deal with Saudi money, and are now shocked to discover that the Saudi’s are up to some shady shit.
Second, there are rumors that the Saudi government has either planted or groomed moles at tech companies for the express purpose of identifying dissidents. There was some talk about there being one on Twitter with access to user IP addresses, but I’m not sure if that’s been substantiated.
I think a more plausible explanation is your first point that they love Saudi money and they can ignore the human rights abuses as long as they stay suitably low-key and rumour-based. As soon as they go onto the worldwide news, these same people suddenly feign ignorance and walk slowly backwards from their deals.
Plenty of companies act surprised as a means of extracting themselves from suddenly unpopular deals while saving face.
Technically, it is of course possible that they where infiltrated/hacked whatever. But it might as well be that they do do business with the saudi's and gave them access to this 'internal report'. I mean, why else would you have a report on the top three critics of a regime?
https://twitter.com/dsquareddigest/status/105398920020122009...
And that still begs the question of why an report on dissidents was compiled for their own internal use in the first place...