ANALYSIS: The SEC Is Not a Data Breach Agency

The U.S. government suffers possibly its most compromising cybersecurity attack and the public’s best source for reliable information is … the SEC? Head-scratching, but arguably true.

A large cyber hack campaign attributed to Russia first came to light when malware protection firm FireEye disclosed, simultaneously on its company blog and in an SEC Form 8-K filed on Dec. 8 (and updated Dec. 14), that it had been hacked. According to SolarWinds Corp.’s Form 8-K, filed the same day as FireEye’s update, saboteurs added malware to the Orion monitoring product updates that were uploaded to government and private-sector computers. FireEye’s ...