Photo: Gorodenkoff/Adobe Stock

Public companies will shoulder the potentially costly burden of a new federal rule giving them just four days to report a cybersecurity incident—a nightmare for firms lacking a sound framework for managing data security.

Although likely to spur more consistent and earlier reporting of data breaches, the Securities and Exchange Commission rule also provides red meat for shareholder lawsuits and likely will prompt insurers to impose more stringent underwriting standards against such claims.

Want to continue reading?
Become a Free PropertyCasualty360 Digital Reader

Your access to unlimited PropertyCasualty360 content isn’t changing.
Once you are an ALM digital member, you’ll receive:

  • Breaking insurance news and analysis, on-site and via our newsletters and custom alerts
  • Weekly Insurance Speak podcast featuring exclusive interviews with industry leaders
  • Educational webcasts, white papers, and ebooks from industry thought leaders
  • Critical converage of the employee benefits and financial advisory markets on our other ALM sites, BenefitsPRO and ThinkAdvisor
NOT FOR REPRINT

© 2025 ALM Global, LLC, All Rights Reserved. Request academic re-use from www.copyright.com. All other uses, submit a request to [email protected]. For more information visit Asset & Logo Licensing.