Data Breach Disclosure Lessons From SEC's $35M Yahoo Fine
By Michael Dicke and Alexis Caloza ( May 9, 2018, 11:48 AM EDT) -- The U.S. Securities and Exchange Commission announced on April 24, 2018, that Yahoo — now known as Altaba — agreed to pay a $35 million penalty to settle claims that the company failed to timely disclose a 2014 data breach that compromised hundreds of millions of user accounts. The settlement marks the first time that the SEC has brought an enforcement action alleging that a company's failure to disclose a breach violated the federal securities laws. The Yahoo action follows the SEC's February 2018 interpretative guidance on public company cybersecurity disclosures, which was widely seen as a further signal that the SEC would be more closely scrutinizing public company responses to cybersecurity incidents....
Law360 is on it, so you are, too.
A Law360 subscription puts you at the center of fast-moving legal issues, trends and developments so you can act with speed and confidence. Over 200 articles are published daily across more than 60 topics, industries, practice areas and jurisdictions.