Cybersecurity
SEC Ramps Up Massive-Hack Probe With Focus on Tech, Telecom Companies
- Hacked companies are asked what they knew, when they knew it
- US business lobby pushes back in court, calling it overreach
The SEC headquarters in Washington, DC.
Photographer: Valerie Plesch/BloombergThis article is for subscribers only.
The US Securities and Exchange Commission is asking tech and telecom companies how they handled the sprawling 2020 SolarWinds cyberattack, and drawing fire from the cybersecurity industry and big business for what they call overreach.
The SEC, which sought the information from a broader swath of victim companies in the wake of the massive hack, has been refining its inquiries, according to people familiar with it, who didn’t identify the companies. The regulator has asked for internal communications about the cyber-assault’s impact, probing for gaps in corporate security and for other cyber incidents, according to the people, who asked not to be named discussing a private matter.