United

April

The Intercontinental Exchange (ICE) will pay a penalty of $10 million for failing to inform authorities about a cyber intrusion, according to an announcement from the United States Securities and Exchange Commission (SEC).
 The breach, discovered in April 2021, involved malicious code inserted into a virtual private network (VPN) device to access ICE’s corporate network. The SEC <a href="https://www.sec.gov/news/press-release/2024-63?utm_medium=email&amp;utm_source=govdelivery" target="_blank" rel="noopener nofollow">claims</a> that ICE quickly identified the threat but failed to notify legal and compliance officials at their subsidiaries, including the New York Stock Exchange, for several days.
The agency’s Regulation Systems Compliance and Integrity (Regulation SCI) requires companies to inform the SEC immediately of any significant cybersecurity incident. SEC Director of Enforcement Gurbir&nbsp; Grewal said:
<blockquote data-ct-non-breakable="true">
 “When it comes to cybersecurity, especially events at critical market intermediaries, every second counts and four days can be an eternity.”
</blockquote>
ICE is behind the world’s largest network of exchanges and clearing houses. Its subsidiaries include exchanges like the New York Stock Exchange (NYSE), ICE Futures U.S. and Europe, alongside clearing houses and data providers.
 The SEC’s enforcement action affected several ICE subsidiaries, including Archipelago Trading Services Inc, New York Stock Exchange LLC, NYSE American LLC, NYSE Arca Inc, ICE Clear Credit LLC, ICE Clear Europe Ltd, NYSE Chicago Inc and NYSE National Inc. Furthermore, the Securities Industry Automation Corporation agreed to a cease-and-desist order in addition to the monetary penalty.
In response to the fines, SEC Commissioners Hester Peirce and Mark Uyeda released a statement <a href="https://www.sec.gov/news/statement/peirce-uyeda-statement-intcntl-exchange-052224?utm_medium=email&amp;utm_source=govdelivery" target="_blank" rel="noopener nofollow">calling</a> the fine an “overreaction” to a “minimal incident.”
<blockquote data-ct-non-breakable="true">
 “This disproportionately large penalty for failure to report in a timely manner an incident that the ICE SCI subsidiaries ultimately determined was de minimis suggests to us that the Commission is more concerned with generating large penalties than with ensuring that important market entities address technological vulnerabilities.”
</blockquote>
According to Peirce and Uyeda, the fine contributes to the perception that the “Commission’s penalty regime is more a tool to generate numbers for year-end statistics and less a means to achieve outcomes that enhance market integrity.” The commissioners had criticized the SEC’s approach to crypto companies in the past.
Magazine: <a href="https://cointelegraph.com/magazine/crypto-market-makers-legit-dodgy-fake-it/">What do crypto market makers actually do? Liquidity, or manipulation</a>

SEC fines NYSE parent company $10M for failing to report cyberattack

Cointelegraph

Other articles published on May 22, 2024

BONK, Toncoin, And Borroe Finance – 3 Cryptocurrencies With Brewing Rally For Over 100x Gains

Bitcoin Surpasses $72,000 Due to Potential Ethereum ETF Approval

Oracle Protocols: Bridging the Gap Between Blockchain and the Real World

Uniswap Labs Claims That Crypto Tokens Are Files, Not Securities

Whales Optimistic; Wallets Increase For Maker (MKR) DAO

Meet Laszlo Hanyecz, Who Purchased $700 Million Worth of Pizza

Join our free newsletter for daily crypto updates!