US Securities and Exchange Commission
USsec.gov
The US Securities and Exchange Commission requires a public company to disclose a material cybersecurity incident on Form 8-K Item 1.05 within four business days of determining the incident is material. Breach Census ingests SEC EDGAR's full-text search for Item 1.05 filings every six hours and cites each filing as a self-report on the affected organization's page; the SEC's own enforcement actions are not yet a separately collected feed, so this page's actions table stays empty even though SEC-sourced incidents appear elsewhere on the site.
Enforcement actions
No enforcement actions recorded for this regulator yet.
Questions and answers
Does Breach Census have any enforcement actions from US Securities and Exchange Commission on file?
No enforcement actions from US Securities and Exchange Commission are recorded on Breach Census yet.
What is US Securities and Exchange Commission's breach-notification rule?
SEC Form 8-K Item 1.05 requires a public company to disclose a material cybersecurity incident within four business days of determining that it is material.