Comment by toomuchtodo

SEC registrants are required to make a disclosure within 4 business days once a cybersecurity incident is deemed by the company to be material to a reasonable investor.

https://www.sec.gov/news/statement/gerding-cybersecurity-dis...