SEC Chair Clayton Says Edgar System Data Breach Exposed Personally Identifiable Information

SEC Chair Jay Clayton provided an update on the investigation into the 2016 EDGAR system security breach and highlighted efforts to improve cybersecurity measures (see previous coverage of initial disclosure and first SEC update).

Mr. Clayton reported that hackers were able to obtain personal information including the names, birthdates and social security numbers of two individuals. He stated that the SEC is offering these individuals identity theft protection. Mr. Clayton detailed the following elements of the SEC's cybersecurity review:

• an Office of the Inspector General review of the EDGAR system data breach;
• an SEC Division of Enforcement examination of potential illicit trading related to the breach;