{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/us/decision",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/us/decision)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-13",
    "fingerprint": "ewai:us:e76047",
    "proof": "sha256:315eed1d97f18840996d33138832c0e67562d0296f2051a126ac493657261894",
    "jurisdiction": "us",
    "lang": "en"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "id": "answer:us:sec:cyber-incident-disclosure",
  "type": "answer",
  "schema_version": "1",
  "regulation": "sec",
  "jurisdiction": "us",
  "question": {
    "sv": "När måste ett börsnoterat bolag rapportera en cyberincident till SEC?",
    "en": "When must a public company disclose a cybersecurity incident to the SEC?"
  },
  "answer": {
    "sv": "En cyberincident som bolaget bedömer som väsentlig rapporteras på Form 8-K Item 1.05 inom fyra arbetsdagar efter bedömningen. Bedömningen ska göras utan oskäligt dröjsmål efter upptäckten. Uppskov kräver beslut av USA:s justitieminister.",
    "en": "A cybersecurity incident the registrant determines to be material is disclosed on Form 8-K Item 1.05 within four business days of that determination, which must be made without unreasonable delay after discovery. Delay requires an Attorney General determination."
  },
  "sanctions": [
    {
      "id": "sanction:us:sec:civil-penalty-21b",
      "type": "civil_penalty",
      "provision": "Exchange Act §21B(b), 15 U.S.C. §78u-2(b)",
      "max_usd": 500000,
      "summary": "Tier 1 to 3, up to USD 500,000 per act or omission for entities (statutory base).",
      "adjusted": "not_in_register",
      "sha256": "3dd8b21dc43b1e14fff73e361fe88175b266153cac39cafd46283f0cf8adaa49"
    },
    {
      "id": "sanction:us:sec:criminal-32a",
      "type": "criminal",
      "provision": "Exchange Act §32(a), 15 U.S.C. §78ff(a)",
      "max_usd": 25000000,
      "summary": "Willful violations: up to USD 5 million and 20 years for individuals, USD 25 million for entities.",
      "adjusted": "n/a",
      "sha256": "e42fbd031550a60a17b432a8555fada30058f5b37028d5d8e873c6de54a5ca65"
    }
  ],
  "outcome": {
    "status": "ok",
    "decisions": 5,
    "with_monetary_penalty": 5,
    "share_monetary": 1,
    "median_usd": 995000,
    "max_usd": 4000000,
    "latest": "2024-10-22"
  },
  "timeline": [
    {
      "id": "timeline:us:sec:8k-1-05",
      "label": "Form 8-K Item 1.05 after materiality determination",
      "days": null,
      "business_days": 4,
      "date": null
    },
    {
      "id": "timeline:us:sec:item-1-05-effective",
      "label": "Item 1.05 effective",
      "days": null,
      "business_days": null,
      "date": "2023-12-18"
    },
    {
      "id": "timeline:us:sec:10-k-large",
      "label": "10-K, large accelerated filer, after fiscal year end",
      "days": 60,
      "business_days": null,
      "date": null
    },
    {
      "id": "timeline:us:sec:10-k-non-accelerated",
      "label": "10-K, non-accelerated filer",
      "days": 90,
      "business_days": null,
      "date": null
    },
    {
      "id": "timeline:us:sec:10-q",
      "label": "10-Q, accelerated filers, after quarter end",
      "days": 40,
      "business_days": null,
      "date": null
    }
  ],
  "proof": {
    "source": [
      "https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure"
    ],
    "precedent": [
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2021-102"
    ],
    "provision": [
      "Form 8-K Item 1.05(a)",
      "Form 8-K Item 1.05, Instruction 1",
      "Form 8-K, General Instruction B.1"
    ],
    "object": "answer:us:sec:cyber-incident-disclosure",
    "label": "Source: NovaCopilot"
  },
  "read_at": "2026-10-10",
  "v": 1,
  "sha256": "d2c2c6b58d1ff4aacd655d3710f16195651fdb43749aa5d3d9a0ca690d4ff287",
  "source": "Source: NovaCopilot",
  "hash": "sha256:315eed1d97f18840996d33138832c0e67562d0296f2051a126ac493657261894",
  "version": "legal-2026-10-13",
  "expires": "2026-10-16T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-13+legal-2026-10-13+2026-10-13T11:29:14",
    "content_hash": "sha256:315eed1d97f18840996d33138832c0e67562d0296f2051a126ac493657261894",
    "revalidate_after": "2026-10-13T13:35:37.516Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/us/decision",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "obligations": 3,
    "risks": 3,
    "actions": 4,
    "decisions": 5
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}