SEC fines four companies $7 million for ‘misleading cyber disclosures’ regarding SolarWinds hack
Reading Time: 2 minutesThe Securities and Exchange Commission (SEC) announced on Tuesday that it charged and imposed penalties on four companies for making misleading disclosures linked to the 2019 SolarWinds data breach.
The four companies charged are cybersecurity firms Check Point, which will pay a civil penalty of $995,000; Mimecast, which will pay $990,000; and the tech companies Unisys, which will pay $4 million, and Avaya, which will pay $1 million.
All of these companies were victims of the hack that hit SolarWinds, which affected several other companies and government agencies that used SolarWinds software. According to the SEC, each company committed different violations that ‘negligently’ downplayed and minimized the damage of the breaches.
‘While public companies may become targets of cyberattacks, it is incumbent upon them to not further victimize their shareholders or other members of the investing public by providing misleading disclosures about the cybersecurity incidents they have encountered,’ said Sanjay Wadhwa, acting director of the SEC’s Division of Enforcement. ‘Here, the SEC’s orders find that these companies provided misleading disclosures about the incidents at issue, leaving investors in the dark about the true scope of the incidents.’
According to the SEC, each company committed different violations. Avaya said hackers accessed a ‘limited number’ of company’s emails, but did not say that the hackers also accessed ‘at least 145 files in its cloud file sharing environment.’ Despite knowing about the breach, Check Point ‘described cyber intrusions and risks’ in ‘generic terms.’ Mimecast ‘minimized the attack by failing to disclose’ what code and the quantity of company encrypted credentials that the hackers stole. And Unisys ‘described its risks from cybersecurity events as hypothetical’ even though it was hit by two SolarWinds-related breaches.
two SolarWinds-related breaches.
The SEC said that all companies collaborated with its investigation and agreed to pay the penalties and ‘to cease and desist from future violations of the charged provisions,’ while also not ‘admitting or denying’ the SEC findings.
‘We believed that we complied with our disclosure obligations based on the regulatory requirements at that time,’ Hamilton said.
In the last few years, the SEC has imposed a series of new obligations on publicly traded companies when it comes to disclosing data breaches, and their effects on the company and its customers and users.
Ref: techcrunch
MediaDownloader.net -> Free Online Video Downloader, Download Any Video From YouTube, VK, Vimeo, Twitter, Twitch, Tumblr, Tiktok, Telegram, TED, Streamable, Soundcloud, Snapchat, Share, Rumble, Reddit, PuhuTV, Pinterest, Periscope, Ok.ru, MxTakatak, Mixcloud, Mashable, LinkedIn, Likee, Kwai, Izlesene, Instagram, Imgur, IMDB, Ifunny, Gaana, Flickr, Febspot, Facebook, ESPN, Douyin, Dailymotion, Buzzfeed, BluTV, Blogger, Bitchute, Bilibili, Bandcamp, Akıllı, 9GAG