SEC reveals 2016 hack that breached its filing system


              FILE- In this March 23, 2017, file photo, Securities and Exchange Commission (SEC) Chairman nominee Jay Clayton testifies on Capitol Hill in Washington at his confirmation hearing before the Senate Banking Committee. The SEC says a cyber breach of a filing system it uses may have provided the basis for some illegal trading in 2016. In a statement posted Wednesday, Sept. 20, evening on the SEC’s website, Clayton says a review of the agency’s cybersecurity risk profile determined that the previously detected “incident” was caused by “a software vulnerability” in its EDGAR filing system. (AP Photo/Pablo Martinez Monsivais, File)
FILE- In this March 23, 2017, file photo, Securities and Exchange Commission (SEC) Chairman nominee Jay Clayton testifies on Capitol Hill in Washington at his confirmation hearing before the Senate Banking Committee. The SEC says a cyber breach of a filing system it uses may have provided the basis for some illegal trading in 2016. In a statement posted Wednesday, Sept. 20, evening on the SEC’s website, Clayton says a review of the agency’s cybersecurity risk profile determined that the previously detected “incident” was caused by “a software vulnerability” in its EDGAR filing system. (AP Photo/Pablo Martinez Monsivais, File)

NEW YORK (AP) - The Securities and Exchange Commission says a cyber breach of a filing system it uses may have provided the basis for some illegal trading in 2016.

In a statement posted Wednesday evening on the SEC's website, Chairman Jay Clayton says a review of the agency's cybersecurity risk profile determined that the previously detected "incident" was caused by "a software vulnerability" in its EDGAR filing system.

The SEC chairman says this breach did not result in exposing personally identifiable information.

The SEC files financial market disclosure documents through its EDGAR system, which processes over 1.7 million electronic filings in any given year.

Clayton's statement also mentioned that a 2014 internal review was unable to locate some agency laptops that may have contained nonpublic information.

Upcoming Events