Intercontinental Exchange failed to notify nine of its subsidiaries about a VPN breach, sitting on the information for days.
Source: ADnet
Source Link: https://www.zdnet.com/article/the-sec-slaps-nyses-parent-company-with-a-10m-fine-for-not-immediately-reporting-a-hack/#ftag=RSSbaffb68