New SEC Rules Aim to Curb Investor Costs When Companies Are Hacked

person trading stocks on their phone

The Securities and Exchange Commission (SEC) has adopted new rules requiring public companies to disclose within four days material cybersecurity breaches that could affect investors.

In a statement announcing the decision, SEC Chair Gary Gensler acknowledged that many public companies already disclose cybersecurity events to investors.