Banking Groups Urge SEC to Reconsider Cybersecurity Incident Disclosure Rule Impacting Coinbase and Other Public Companies
The post Banking Groups Urge SEC to Reconsider Cybersecurity Incident Disclosure Rule Impacting Coinbase and Other Public Companies appeared on BitcoinEthereumNews.com.
Major banking groups are urging the SEC to repeal a rule mandating the rapid disclosure of cybersecurity incidents, citing potential harms to financial infrastructure. This move reflects a growing concern within the banking sector about the implications of public disclosures on cybersecurity and operational effectiveness. As stated by the American Bankers Association, the public disclosure rule exacerbates risks and may hinder optimal incident responses. Banking groups are petitioning the SEC to rescind cybersecurity incident reporting rules, fearing they hinder effective incident response and increase risk. SEC’s Cybersecurity Rule Under Fire: Industry Concerns The Securities and Exchange Commission (SEC) implemented its Cybersecurity Risk Management rule in July 2023, aiming for greater transparency regarding cybersecurity incidents among public companies. However, banking groups argue that the rule poses significant challenges, particularly for organizations tasked with safeguarding critical infrastructure. Impact on Incident Response and Market Confusion The banking groups—comprising notable associations such as the Securities Industry and Financial Markets Association and the Bank Policy Institute—assert that the SEC’s requirement for rapid disclosure creates a convoluted environment for incident management. The “complex and narrow disclosure delay mechanism” is said to disrupt law enforcement efforts and adds to “market confusion,” straining the relationship between mandatory reporting and voluntary disclosures. Confidentiality vs. Transparency: A Delicate Balance One major critique of the SEC’s regulation is its potential to undermine the confidentiality necessary for effective incident management. The banking groups contend that public disclosure could be exploited by ransomware attackers, effectively turning it into a tool for extortion. They emphasize that premature disclosures can not only escalate cybersecurity risks but can also chill honest internal conversations, thus hampering information sharing crucial for improving defenses. Impacts on Publicly Listed Crypto Companies Publicly traded crypto companies are particularly affected by these developments. For instance, Coinbase recently disclosed a significant breach involving…
Filed under: News - @ May 26, 2025 3:29 am