Following a record year for data breach incidents — with eight breaches exposing over 10 million identities — the U.S. Securities and Exchange Commission (SEC) is closely scrutinizing how those breaches were handled. Multiple recently-opened SEC investigations are focusing on the data security processes companies had in place when the breaches occurred and how much they disclosed — or failed to disclose — to investors about them.
via SEC Investigations Spur Debate over “Materiality” of Cyberattacks | WeComply