Category: Failure to Report Cyber Intrusions

Failure to Report Cyber Intrusions refers to the failure of an organization or individual to promptly disclose a security breach or unauthorized access to computer systems or networks as required by applicable regulations or policies. This can include not notifying affected parties, such as customers or regulatory bodies, about compromised data or systems, which can have serious consequences. Such failures may stem from negligence, lack of awareness, or an attempt to conceal the incident, potentially exacerbating the impact on affected individuals or entities. Reporting breaches promptly is crucial for mitigating harm, enabling timely investigation and response efforts, and maintaining trust with stakeholders by demonstrating transparency and accountability in handling cybersecurity incidents. Regulatory frameworks often mandate specific reporting timelines and procedures to ensure that breaches are managed effectively and responsibly.

SEC-PR-2024-63

SEC-PR-2024-63 (MAY. 22, 2024) Source: https://www.sec.gov/newsroom/press-releases/2024-63 Download: SEC-PR-2024-63 ⊗ (PDF) PRESS RELEASE | 2024-63 SEC Charges Intercontinental Exchange and Nine Affiliates Including the New York Stock Exchange With Failing to Inform the Commission of a Cyber Intrusion Washington D.C., May 22, 2024 — The Securities and Exchange Commission today announced that The Intercontinental Exchange, Inc. […]