Study finds ‘significant uptick’ in cybersecurity disclosures to SEC

Paul Hastings analysis shows a 60% increase in public-company cybersecurity incident disclosures since new SEC rules, with 78% filed within eight days of discovery but under 10% detailing material impacts; the report highlights ambiguity around materiality, cites the CDK Global ransomware event (reported $25M ransom) as an example, and notes one in four incidents involve third-party breaches.