Skip to Primary Navigation

SEC charges four companies for underreporting Sunburst data breach damage

Image of a man looking at lines of code on a laptop.
Photo: Adam Berry/Getty Images

The four settlements come nearly one year after the SEC sued SolarWinds for misleading investors about its cybersecurity controls.

Four US companies, Avaya, Unisys, Mimecast and Check Point Software Technologies Ltd were each charged by the SEC for downplaying the extent to which their data had been compromised in the massive 2020-2021 SolarWinds “Sunburst” hack.

In September 2019, Russian state-affiliated hackers launched an attack on Orion, a network management

After