Much has been written about the Securities and Exchange Commission’s enforcement action involving Yahoo’s failure to adequately disclose a cyberbreach.[1]  I am writing about something that the SEC’s announcement and order did not address and therefore has not been …