An Unasserted Lesson of the SEC’s Yahoo Cyberbreach Enforcement Action

Much has been written about the Securities and Exchange Commission’s enforcement action involving Yahoo’s failure to adequately disclose a cyberbreach.[1]  I am writing about something that the SEC’s announcement and order did not address and therefore has not been written about.

On April 24, 2018, the SEC announced a settlement with Altaba Inc., formerly Yahoo! Inc., under which Altaba agreed to pay $35 million and take certain remedial actions to resolve claims that Yahoo violated federal securities law by waiting until September 2016 to make disclosures about a 2014 data breach of its user database.[2]  The SEC’s announcement … Read more