Recently, the Securities and Exchange Commission (the "SEC") announced a settlement with a registrant relating to the registrant's failure to disclose the occurrence of a cyber breach.  The breach occurred in 2014 and was disclosed in 2016.  A later discovered breach that took place in 2013 was disclosed in 2017.  The SEC noted that the company did not fully assess the impact of the breach on its business nor whether the disclosures in its public filings, which addressed potential breaches, were rendered misleading by virtue of the actual breach.  The SEC did note that it would not second-guess judgments regarding disclosures made by registrant's acting in good faith.

The settlement, taken together with statements made by representatives of the SEC regarding the importance of assessing cyber breaches and related risks, and the recent guidance from the SEC regarding cybersecurity disclosures, serve to emphasize, among other things, the importance of disclosure controls and procedures that take into account cyber disclosures.

Visit us at mayerbrown.com

Mayer Brown is a global legal services provider comprising legal practices that are separate entities (the "Mayer Brown Practices"). The Mayer Brown Practices are: Mayer Brown LLP and Mayer Brown Europe – Brussels LLP, both limited liability partnerships established in Illinois USA; Mayer Brown International LLP, a limited liability partnership incorporated in England and Wales (authorized and regulated by the Solicitors Regulation Authority and registered in England and Wales number OC 303359); Mayer Brown, a SELAS established in France; Mayer Brown JSM, a Hong Kong partnership and its associated entities in Asia; and Tauil & Chequer Advogados, a Brazilian law partnership with which Mayer Brown is associated. "Mayer Brown" and the Mayer Brown logo are the trademarks of the Mayer Brown Practices in their respective jurisdictions.

© Copyright 2018. The Mayer Brown Practices. All rights reserved.

This Mayer Brown article provides information and comments on legal issues and developments of interest. The foregoing is not a comprehensive treatment of the subject matter covered and is not intended to provide legal advice. Readers should seek specific legal advice before taking any action with respect to the matters discussed herein.