In a significant turn of events on July 2, 2025, the SEC, SolarWinds Corp. and its Chief Information Security Officer (CISO), Timothy Brown, announced through a joint letter to the U.S. District Court for the Southern...more
7/18/2025
/ Cyber Attacks ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Breach ,
Disclosure Requirements ,
Enforcement Actions ,
Investors ,
Publicly-Traded Companies ,
Securities and Exchange Commission (SEC) ,
Settlement ,
Settlement Negotiations ,
SolarWinds ,
Stays ,
Technology Sector
Readers, thank you for journeying with us through all nine (and this, our 10th and final!) installments of Season's Readings. In this final piece, we turn from the past and look ahead to what may be in store from the SEC's...more
The SEC was increasingly active in fiscal year (FY) 2024 in pursuing enforcement actions involving cybersecurity incidents and artificial intelligence (AI) (query how long society will continue to define AI; harkens to the...more
The SEC on Oct. 22, 2024, announced charges against four companies for allegedly making materially misleading disclosures concerning the impact of cybersecurity incidents associated with the compromised SolarWinds' Orion...more
10/31/2024
/ Chief Information Security Officer (CISO) ,
Civil Monetary Penalty ,
Corporate Governance ,
Cyber Attacks ,
Cyber Incident Reporting ,
Cybersecurity ,
Disclosure Requirements ,
Enforcement Actions ,
Form 8-K ,
Material Misrepresentation ,
Misleading Statements ,
Publicly-Traded Companies ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act ,
Software ,
SolarWinds
This Holland & Knight blog post is the second installment in a two-part series that examines the challenges to the U.S. Securities and Exchange Commission's (SEC) charges in its landmark case against SolarWinds Corp....more
7/29/2024
/ Board of Directors ,
Chief Information Security Officer (CISO) ,
Corporate Governance ,
Cyber Attacks ,
Cybersecurity ,
Data Breach ,
Disclosure Requirements ,
Enforcement Actions ,
Fraud ,
Incident Response Plans ,
Material Misrepresentation ,
Misleading Statements ,
Publicly-Traded Companies ,
Risk Mitigation ,
Securities and Exchange Commission (SEC) ,
Securities Fraud ,
SolarWinds
The U.S. District Court for the Southern District of New York on July 18, 2024, dismissed most of the SEC's landmark cyber enforcement litigation against SolarWinds Corp. (SolarWinds or the Company) and the Company's Chief...more
7/24/2024
/ Audits ,
Chief Information Security Officer (CISO) ,
Corporate Counsel ,
Cybersecurity ,
Disclosure Requirements ,
Enforcement Actions ,
Enforcement Authority ,
Form 8-K ,
Hackers ,
Internal Controls ,
Material Misstatements ,
Materiality ,
Motion to Dismiss ,
NIST ,
Popular ,
Sarbanes-Oxley ,
Securities and Exchange Commission (SEC) ,
Software Developers ,
SolarWinds
The SEC continues to expand its cybersecurity enforcement authority to include allegations that a company's failure to monitor its managed security service providers (MSSP) amounts to violations of federal securities laws....more
7/9/2024
/ Accounting Controls ,
Chief Information Security Officer (CISO) ,
Corporate Governance ,
Cybersecurity ,
Data Breach ,
Disclosure Requirements ,
Enforcement Actions ,
Form 8-K ,
Incident Response Plans ,
Internal Controls ,
Personally Identifiable Information ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act
The SEC has been aggressively pursuing cybersecurity investigations and enforcement actions against public companies and foreign private issuers. In these actions, the SEC often alleges one of two theories: 1) that the...more
7/8/2024
/ Chief Information Security Officer (CISO) ,
Corporate Governance ,
Cyber Incident Reporting ,
Cybersecurity ,
Data Protection ,
Disclosure Requirements ,
Enforcement Actions ,
Foreign Private Issuers ,
Form 8-K ,
Materiality ,
Misrepresentation ,
Professional Liability ,
Publicly-Traded Companies ,
Puffery ,
Risk Management ,
Securities and Exchange Commission (SEC) ,
Security and Privacy Controls ,
SolarWinds
The U.S. Securities and Exchange Commission's (SEC) Division of Corporation Finance Director Erik Gerding released a statement on May 21, 2024, addressing Disclosure of Cybersecurity Incidents Determined to be Material and...more
5/23/2024
/ Compliance ,
Compliance Dates ,
Corporate Governance ,
Cyber Incident Reporting ,
Cybersecurity ,
Disclosure Requirements ,
Form 8-K ,
Materiality ,
Publicly-Traded Companies ,
Risk Management ,
Securities and Exchange Commission (SEC) ,
Securities Regulation
The SEC's Division of Enforcement recently announced its Fiscal Year (FY) 2023 results, touting a record-setting year. Rather than repeat Enforcement's detailed report available here, we boil the data down to give our readers...more
11/21/2023
/ Civil Monetary Penalty ,
Cooperation ,
Cryptoassets ,
Cybersecurity ,
Disgorgement ,
Enforcement Actions ,
Enforcement Statistics ,
Environmental Social & Governance (ESG) ,
Publicly-Traded Companies ,
Securities and Exchange Commission (SEC) ,
Whistleblower Awards ,
Whistleblowers
Amid ongoing federal government shutdown risks and the close of its fiscal year, the U.S. Securities and Exchange Commission's (SEC) Division of Examinations (Exams) recently announced its fiscal year (FY) 2024 priorities....more
10/26/2023
/ Anti-Money Laundering ,
Broker-Dealer ,
Clearing Agencies ,
Compliance ,
Cryptoassets ,
Cybersecurity ,
FinTech ,
Investment Adviser ,
Investment Companies ,
Market Participants ,
Regulation SCI ,
Risk Alert ,
Risk Assessment ,
SEC Examination Priorities ,
Securities and Exchange Commission (SEC) ,
SRO
Securities Enforcement Defense attorneys Jessica Magee and Scott Mascianica welcome Allworth General Counsel Barry Greenberg to this episode of Coffee & Conversation. Their chat focuses on cybersecurity and proposed...more
Continuing its focus on crypto enforcement, the SEC on May 3, 2022, announced the addition of 20 positions to its relaunched Crypto Assets and Cyber Unit – formerly the Cyber Unit. The additions nearly double the size of the...more
5/3/2022
/ Administrative Agencies ,
Crypto Exchanges ,
Cryptoassets ,
Cybersecurity ,
Decentralized Finance (DeFi) ,
Enforcement ,
Enforcement Priorities ,
Non-Fungible Tokens (NFTs) ,
Securities and Exchange Commission (SEC) ,
Securities Exchange Act ,
Securities Violations
We continue our year-end review of SEC enforcement activity and turn our attention to a topic grabbing seemingly daily headlines across multiple industries: cybersecurity. As the risks – and realities – of cyberattacks...more
1/21/2022
/ Cyber Crimes ,
Cybersecurity ,
Data Breach ,
Data Protection ,
Data Security ,
Enforcement Actions ,
Enforcement Priorities ,
Hackers ,
Personally Identifiable Information ,
Popular ,
Securities and Exchange Commission (SEC)