Scores Of U.S. Firms Keep Quiet About Cyber Attacks - 6/13/2012

Home

Index of Filings

News and Press Releases

Filings

Decisions

Settlements

Litigation Activity Indices

Top Ten List

Annual/Quarterly Updates

Clearinghouse Research

Articles & Papers

Search

Related Sites

About Us

Local Rules

Sponsors


Register


_______________
Copyright © 2001
Stanford Law School


2012 News and Press Releases

News News 2012


HEADLINE NEWS:

Scores Of U.S. Firms Keep Quiet About Cyber Attacks
Andrea Shalal-Esa

Reuters. June 13, 2012

_________________________________________________________________________

EXCERPT: Scores of U.S. companies have not disclosed breaches of their computer systems, even though eight months have passed since U.S. securities regulators issued guidelines on disclosing cyber attacks, according to leading security experts. Calling for more rigorous rules and enforcement, these experts told the Reuters Global Media and Technology Summit in New York they know of many cyber intrusions, thefts and other digital security issues that were kept quiet. "There have been lots of breaches in every industry that have never been publicized," said Shawn Henry, the FBI's former top cyber cop, who joined a new cyber security company, CrowdStrike, in April. Henry said the FBI was working on 2,000 active cyber cases when he retired from the agency in March. "There's only a handful of cases that anybody has ever heard about," he said. U.S. government officials and cybersecurity consultants have been raising alarms about the growing sophistication of attacks on private and government computer networks. The U.S. Securities and Exchange Commission issued guidance on October 13 that outlined how and when companies should report hacking incidents and cybersecurity risk. The guidance did not establish new rules, and many experts say it lacks the teeth to compel heightened reporting.

Back to News page | Back to Archived News 2012 page | Back to Top