Latest SEC news

Intercontinental Exchange to pay $10M SEC penalty over VPN breach

The Intercontinental Exchange (ICE) will pay a $10 million penalty to settle charges brought by the U.S. Securities and Exchange Commission (SEC) after failing to ensure its subsidiaries promptly reported an April 2021 VPN security breach.
- Sergiu Gatlan
- May 22, 2024
- 01:20 PM
- 0
SEC: Financial orgs have 30 days to send data breach notifications

The Securities and Exchange Commission (SEC) has adopted amendments to Regulation S-P that require certain financial institutions to disclose data breach incidents to impacted individuals within 30 days of discovery.
- Bill Toulas
- May 17, 2024
- 12:13 PM
- 0
Targus discloses cyberattack after hackers detected on file servers

Laptop and tablet accessories maker Targus disclosed that it suffered a cyberattack disrupting operations after a threat actor gained access to the company's file servers.
- Lawrence Abrams
- April 08, 2024
- 09:41 PM
- 0
Investment advisers pay $400K to settle ‘AI washing’ charges

The U.S. Securities and Exchange Commission (SEC) announced today that two investment advisers, Delphia (USA) and Global Predictions, have settled charges of making misleading statements regarding the use of artificial intelligence (AI) technology in their products.
- Sergiu Gatlan
- March 18, 2024
- 05:38 PM
- 0
Johnson Controls says ransomware attack cost $27 million, data stolen

Johnson Controls International has confirmed that a September 2023 ransomware attack cost the company $27 million in expenses and led to a data breach after hackers stole corporate data.
- Bill Toulas
- January 31, 2024
- 09:55 AM
- 0
SEC confirms X account was hacked in SIM swapping attack

The U.S. Securities and Exchange Commission confirmed today that its X account was hacked through a SIM-swapping attack on the cell phone number associated with the account.
- Lawrence Abrams
- January 22, 2024
- 06:04 PM
- 1
US SEC’s X account hacked to announce fake Bitcoin ETF approval

The X account for the U.S. Securities and Exchange Commission was hacked today to issue a fake announcement on the approval of Bitcoin ETFs on security exchanges.
- Lawrence Abrams
- January 09, 2024
- 05:30 PM
- 5
Ransomware gang files SEC complaint over victim’s undisclosed breach

The ALPHV/BlackCat ransomware operation has taken extortion to a new level by filing a U.S. Securities and Exchange Commission complaint against one of their alleged victims for not complying with the four-day rule to disclose a cyberattack.
- Ionut Ilascu
- November 15, 2023
- 09:02 PM
- 10
SEC sues SolarWinds for misleading investors before 2020 hack

The U.S. Securities and Exchange Commission (SEC) today charged SolarWinds with defrauding investors by allegedly concealing cybersecurity defense issues before a December 2020 linked to APT29, the Russian Foreign Intelligence Service (SVR) hacking division.
- Sergiu Gatlan
- October 30, 2023
- 05:54 PM
- 1
SEC now requires companies to disclose cyberattacks in 4 days

The U.S. Securities and Exchange Commission has adopted new rules requiring publicly traded companies to disclose cyberattacks within four business days after determining they're material incidents.
- Sergiu Gatlan
- July 26, 2023
- 02:41 PM
- 3
Blackbaud to pay $3M for misleading ransomware attack disclosure

Cloud software provider Blackbaud has agreed to pay $3 million to settle charges brought by the Securities and Exchange Commission (SEC), alleging that it failed to disclose the full impact of a 2020 ransomware attack that affected more than 13,000 customers.
- Sergiu Gatlan
- March 10, 2023
- 11:30 AM
- 0
NVIDIA fined for failure to disclose cryptomining sales boost

The U.S. Securities and Exchange Commission (SEC) announced Friday that it settled charges against multinational tech firm NVIDIA for "inadequate disclosures" of cryptomining's impact on its gaming business.
- Sergiu Gatlan
- May 06, 2022
- 10:30 AM
- 1
SEC ramps up fight on cryptocurrency fraud by doubling cyber unit

The US Securities and Exchange Commission (SEC) announced today that it will almost double the Crypto Assets and Cyber Unit to ramp up the fight against cryptocurrency fraud to protect investors from "cyber-related threats."
- Sergiu Gatlan
- May 03, 2022
- 03:23 PM
- 0
Luxury fashion house Zegna confirms August ransomware attack

The Italian luxury fashion company Ermenegildo Zegna has disclosed a ransomware incident from August 2021 that has resulted in an extensive IT systems outage.
- Bill Toulas
- April 11, 2022
- 02:32 PM
- 0
SEC wants public companies to report breaches within four days

The US Securities and Exchange Commission (SEC) has proposed rule amendments to require publicly traded companies to report data breaches and other cybersecurity incidents within four days after they're determined as being a material incident (one that shareholders would likely consider important).
- Sergiu Gatlan
- March 10, 2022
- 01:03 PM
- 2
US SEC warns investors of ongoing govt impersonation attacks

The Securities and Exchange Commission (SEC) has warned US investors of scammers impersonating SEC officials in government impersonator schemes via phone calls, voicemails, emails, and letters.
- Sergiu Gatlan
- November 21, 2021
- 10:00 AM
- 0
US SEC: Watch out for Hurricane Ida-related investment scams

The US Securities and Exchange Commission has warned investors to be "extremely wary" of potential investment scams related to Hurricane Ida's aftermath.
- Sergiu Gatlan
- September 04, 2021
- 11:12 AM
- 0
Education giant Pearson fined $1M for downplaying data breach

The US Securities and Exchange Commission (SEC) announced today that Pearson, a British multinational educational publishing and services company, has settled charges of mishandling the disclosure process for a 2018 data breach discovered in March 2019.
- Sergiu Gatlan
- August 16, 2021
- 03:23 PM
- 1
SolarWinds reports $3.5 million in expenses from supply-chain attack

SolarWinds has reported expenses of $3.5 million from last year's supply-chain attack, including costs related to incident investigation and remediation.
- Sergiu Gatlan
- March 02, 2021
- 12:42 PM
- 1
Steelcase furniture giant down for 2 weeks after ransomware attack

Office furniture giant Steelcase says that no information was stolen during a Ryuk ransomware attack that forced them to shut down global operations for roughly two weeks.
- Sergiu Gatlan
- November 12, 2020
- 11:52 AM
- 0