Don't Forget to Report a Breach: A Cautionary Tale

Intercontinental Exchange (ICE) experienced a VPN intrusion that was rapidly remediated and had a de minimis operational impact, but ICE failed to notify regulators and subsidiaries within required timelines; the SEC fined the company $10 million. The report highlights the event as a cautionary example of compliance and governance failures—boards and incident response plans must ensure timely regulatory reporting even for low-impact incidents.