Recent Sec Actions Highlight the Importance of Implementing Effective Cybersecurity Measures


On January 15, 2019, the United States Securities and Exchange Commission (“SEC”) filed a civil complaint against thirteen individuals and entities for allegedly hacking into the SEC’s EDGAR filing database between May and at least October 2016.  The complaint alleges that the hackers reaped over $4.1 million from trading on information in confidential filings.  SEC Chairman Jay Clayton explained that the action “illustrates that the SEC faces many of the same cybersecurity threats that confront exchange-listed companies, other SEC-registered entities and market participants of all types” and “we recognize that we must continuously use the resources available to us efficiently and effectively to bolster our cybersecurity defenses and reduce our cyber risk profile.”

In the past year, cybersecurity has been a focus for the SEC.  On February 21, 2018, the Commission issued guidance to assist public companies in issuing sufficient disclosures about cybersecurity risks and incidents.  The guidance provides the SEC’s views on public companies’ disclosure obligations under existing law and addresses the application of disclosure controls and procedures, insider trading prohibitions, and selective disclosure prohibitions in the cybersecurity context.  Chairman Clayton stated that he hopes the new guidance will result in “more complete information being available to investors” regarding the cybersecurity risks facing the companies in which they have invested.

On the heels of this guidance, in April 2018, the SEC fined Yahoo! Inc. $35 million for allegedly failing to disclose a data breach affecting 500 million user accounts from 2014 through 2016.  Then, in September 2018, the SEC reached a settlement with Voya Financial Advisors, Inc. pursuant to which the company agreed to pay $1 million for a violation of the Identity Theft Red Flags Rule that led to hackers accessing 5,600 customers’ private information.

About Faruqi & Faruqi, LLP

Faruqi & Faruqi, LLP focuses on complex civil litigation, including securities, antitrust, wage and hour, personal injury and consumer class actions as well as shareholder derivative and merger and transactional litigation. The firm is headquartered in New York, and maintains offices in California, Delaware, Georgia and Pennsylvania.

Since its founding in 1995, Faruqi & Faruqi, LLP has served as lead or co-lead counsel in numerous high-profile cases which ultimately provided significant recoveries to investors, direct purchasers, consumers and employees.

To schedule a free consultation with our attorneys and to learn more about your legal rights, call our offices today at (877) 247-4292 or (212) 983-9330.

About Megan Sullivan

Megan Sullivan is a Partner in the New York office of Faruqi & Faruqi, LLP.

Tags: faruqi & faruqi, investigation, news, litigation, settlement notice, case, faruqi law, faruqi blog, SEC, 10b-5, Megan Sullivan, Yahoo!, cybersecurity, Jay Clayton, Data Breach Megan Sullivan Megan Sullivan
Partner at Faruqi & Faruqi, LLP

New York office
Tel: (212) 983-9330
Fax: (212) 983-9331
E-mail: msullivan@faruqilaw.com

Finding us

Our Offices


Our offices are nationwide. If you have any questions about a case or our firm, please contact us.

New York

685 Third Avenue 26th Floor
New York, New York 10017
(212) 983-9330
(877) 247-4292
(212) 983-9331

California

10866 Wilshire Boulevard Suite 1470
Los Angeles, California 90024
(424) 256-2884
(424) 256-2885

Delaware

3828 Kennett Pike Suite 201
Wilmington, Delaware 19807
(302) 482-3182
(302) 482-3612

Georgia

3975 Roswell Rd Suite A
Atlanta, Georgia 30342
(404) 847-0617
(404) 506-9534

Pennsylvania

1617 JFK Boulevard, Suite 1550
Philadelphia, Pennsylvania 19103
(215) 277-5770
(215) 277-5771

Faruqi & Faruqi office in New York, New York

Faruqi & Faruqi office in Los Angeles, California

Faruqi & Faruqi office in Wilmington, Delaware

Faruqi & Faruqi office in Atlanta, Georgia

Faruqi & Faruqi office in Philadelphia, Pennsylvania