Rep. Ashley Hinson Questions SEC Chairman on Cybersecurity Vulnerabilities and Data Leaks

SEC Cybersecurity Concerns

• ⚠️ The SEC has experienced multiple data security incidents, including accidental public disclosure of confidential investment manager information on Form N-PORT, inappropriate access to documents by enforcement staff, and a 2016 foreign hacker gaining access to an SEC database resulting in $4.1 million in illegal profits.
• 🎯 These breaches put the trust of American investors at risk and highlight vulnerabilities to foreign adversaries seeking to exploit weaknesses and misuse sensitive investor information.

Addressing Data Retention and Vulnerabilities

• 💡 The SEC Chairman acknowledges these concerns and is committed to a thorough review and "spring cleaning" of the information technology system to identify gaps and improve security.
• 🧠 The Chairman shares personal concern, noting his own information was compromised in a past SEC database hack, emphasizing the need for a good understanding of how to improve systems.

Consolidated Audit Trail (CAT) Risks

• 🚨 The Consolidated Audit Trail (CAT), the largest repository of investor information, is highlighted as potentially insecure and vulnerable to cybercriminals.
• 💰 Concerns include the theft of personally identifiable information for identity theft, potential blackmail of Americans by foreign adversaries, and market manipulation, which could have egregious consequences for the American economy.

IT Improvements and Cost Savings

• 🔍 The SEC plans to review the CAT for its benefits, costs, and potential vulnerabilities, pledging to focus on shoring up defenses and system integrity.
• 💰 An audit by an external team identified $90 million in potential savings by addressing duplicative technologies and inefficiencies, with suggestions to redirect these funds towards better IT practices.