According to the filing, the organization in question failed to devise controls to adequately detect, respond to, and disclose an attack that included data exfiltration and service disruption.

According to the filing, the organization in question failed to devise controls to adequately detect, respond to, and disclose an attack that included data exfiltration and service disruption.

Source: KnowBe4
Source Link: https://blog.knowbe4.com/sec-fines-publicly-traded-company-ransomware-attack