"While public companies may become targets of cyberattacks, it is incumbent upon them to not further victimize their shareholders or other members of the investing public by providing misleading disclosures about the cybersecurity incidents they have encountered."
"The SEC's orders find that these companies provided misleading disclosures about the incidents at issue, leaving investors in the dark about the true scope of the incidents."
"Avaya said hackers accessed a 'limited number' of the company's emails, but did not say that the hackers also accessed 'at least 145 files in its cloud file sharing environment.'"
"Check Point described cyber intrusions and risks in 'generic terms,' and Mimecast minimized the attack by failing to disclose what code and the quantity of company encrypted credentials that the hackers stole."
[
Collection
]
[
|
...
]