SEC victim of hacking, filing system breached

Hackers may have profited from insider trading by using stolen confidential information

The US Securities and Exchange Commission was subject to hacking last year, it has disclosed. It said that its database of corporate announcements was breached and cybercriminals may have used the information for profit.

In a statement, SEC chairman Jay Clayton said that last month it had learned that an incident previously detected in 2016 "may have provided the basis for illicit gain through trading". It added that a software vulnerability in the test filing component of its EDGAR system, which was patched promptly after discovery, was exploited and resulted in access to non-public information.

"Notwithstanding our efforts to protect our systems and manage cybersecurity risk, in certain cases, cyber threat actors have managed to access or misuse our systems," said Clayton.

"We believe the intrusion did not result in unauthorized access to personally identifiable information, jeopardize the operations of the Commission, or result in systemic risk. Our investigation of this matter is ongoing, however, and we are coordinating with appropriate authorities."

"Effective management of internal cybersecurity risk is critical to the SEC achieving its mission and to protecting the non-public information that is entrusted to this agency," SEC Commissioner Michael S. Piwowar said in a statement.

Ilia Kolochenko, CEO of web security company High-Tech Bridge, told IT Pro that the disclosed breach may have disastrous consequences outshining Equifax.

"Cybercriminals could have manipulated the entire stock market and make billions of illicit profit. Ethical investors, including pension and sovereign funds, without the insider information could have lost fortunes as a result," he said.

"This incident clearly exposes how vulnerable our global financial ecosystem is, and how unprepared we are to fight skyrocketing cybercrime. In the future, we will see a steady fusion of common crime with cyber gangs that jointly may challenge state power and dictate their laws, while law enforcement agencies are catastrophically underfinanced by governments and just don't have enough resources to tackle global cybercrime."

Featured Resources

Navigating the new normal: A fast guide to remote working

A smooth transition will support operations for years to come

Download now

Leading the data race

The trends driving the future of data science

Download now

How to create 1:1 customer experiences at scale

Meet the technology capable of delivering the personalisation your customers crave

Download now

How to achieve daily SAP releases

Accelerate the pace of SAP change to support your digital strategy

Download now

Recommended

8 most secure web browsers
web browser

8 most secure web browsers

25 Sep 2020
Your essential guide to internet security
Security

Your essential guide to internet security

23 Sep 2020
How to enable private browsing on any device
privacy

How to enable private browsing on any device

22 Sep 2020
Third-party apps are tracking your WhatsApp activity
social media

Third-party apps are tracking your WhatsApp activity

21 Sep 2020

Most Popular

16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

16 Sep 2020
16 ways to speed up your laptop
Laptops

16 ways to speed up your laptop

16 Sep 2020
Windows XP source code allegedly leaked online
Microsoft Windows

Windows XP source code allegedly leaked online

25 Sep 2020