{
  "attribution": {
    "source": "legal.exploreworldai.com",
    "canonical": "https://legal.exploreworldai.com/api/public/v1/us/event/security-incident",
    "cite_as": "NovaCopilot, legal.exploreworldai.com (https://legal.exploreworldai.com/api/public/v1/us/event/security-incident)",
    "license": "https://legal.exploreworldai.com/revision",
    "version": "legal-2026-10-12",
    "fingerprint": "ewai:us:e257b2",
    "proof": "sha256:2cecc69850e48684d162dbae2bff9cecd22afe22c68ef1ddd72722ab9600e463",
    "jurisdiction": "us",
    "lang": "en",
    "publisher": "NovaCopilot by ExploreWorld Legal",
    "terms": "https://legal.exploreworldai.com/om"
  },
  "brand_source": "Source: NovaCopilot",
  "status": "ok",
  "id": "event:us:security-incident",
  "type": "business_event",
  "schema_version": "1",
  "jurisdiction": "us",
  "title": {
    "sv": "Säkerhetsincident",
    "en": "Security Incident"
  },
  "what_happened": {
    "sv": "En cybersäkerhetsincident har upptäckts i bolagets informationssystem.",
    "en": "A cybersecurity incident has been discovered in the company's information systems."
  },
  "what_must_we_do": [
    {
      "regulation": "sec",
      "what": "Disclose a material cybersecurity incident",
      "provision": "Form 8-K Item 1.05(a)"
    },
    {
      "regulation": "sec",
      "what": "Materiality determination without unreasonable delay",
      "provision": "Form 8-K Item 1.05, Instruction 1"
    },
    {
      "regulation": "sec",
      "what": "Filing within four business days of the materiality determination (summary)",
      "provision": "Form 8-K, General Instruction B.1"
    },
    {
      "regulation": "sec",
      "what": "Delay for national security or public safety (summary)",
      "provision": "Form 8-K Item 1.05(c)"
    },
    {
      "regulation": "sec",
      "what": "Amend when information was not available (summary)",
      "provision": "Form 8-K Item 1.05, Instruction 2"
    },
    {
      "regulation": "ftc",
      "what": "Reasonable data security (summary)",
      "provision": "15 U.S.C. §45(a)"
    }
  ],
  "when": [
    {
      "label": "Form 8-K Item 1.05 after materiality determination",
      "days": null,
      "business_days": 4,
      "date": null,
      "provision": "Form 8-K General Instruction B.1"
    }
  ],
  "if_we_do_not": {
    "highest_risk": 79,
    "sanctions": [
      {
        "regulation": "sec",
        "type": "criminal",
        "provision": "Exchange Act §32(a), 15 U.S.C. §78ff(a)",
        "max_usd": 25000000,
        "summary": "Willful violations: up to USD 5 million and 20 years for individuals, USD 25 million for entities."
      },
      {
        "regulation": "sec",
        "type": "civil_penalty",
        "provision": "Exchange Act §21B(b), 15 U.S.C. §78u-2(b)",
        "max_usd": 500000,
        "summary": "Tier 1 to 3, up to USD 500,000 per act or omission for entities (statutory base)."
      },
      {
        "regulation": "ftc",
        "type": "civil_penalty",
        "provision": "15 U.S.C. §45(m)(1)(A)",
        "max_usd": 10000,
        "summary": "Civil penalty per violation for knowing violations of trade regulation rules or orders; USD 10,000 statutory base, adjusted annually for inflation."
      },
      {
        "regulation": "ftc",
        "type": "injunction",
        "provision": "15 U.S.C. §53(b)",
        "max_usd": null,
        "summary": "Injunctions and conduct bans, including bans on using a technology."
      }
    ]
  },
  "real_outcomes": {
    "status": "ok",
    "decisions": 7,
    "with_monetary_penalty": 7,
    "share_monetary": 1,
    "median_usd": 1000000,
    "max_usd": 575000000,
    "latest": "2024-10-22",
    "precedents": [
      {
        "name": "Avaya Holdings Corp.",
        "authority": "Securities and Exchange Commission",
        "decided": "2024-10-22",
        "amount_usd": 1000000,
        "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
      },
      {
        "name": "Check Point Software Technologies Ltd",
        "authority": "Securities and Exchange Commission",
        "decided": "2024-10-22",
        "amount_usd": 995000,
        "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
      },
      {
        "name": "Mimecast Limited",
        "authority": "Securities and Exchange Commission",
        "decided": "2024-10-22",
        "amount_usd": 990000,
        "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
      },
      {
        "name": "Unisys Corp.",
        "authority": "Securities and Exchange Commission",
        "decided": "2024-10-22",
        "amount_usd": 4000000,
        "source_url": "https://www.sec.gov/newsroom/press-releases/2024-174"
      },
      {
        "name": "Ring LLC",
        "authority": "Federal Trade Commission",
        "decided": "2023-05-31",
        "amount_usd": 5800000,
        "source_url": "https://www.ftc.gov/news-events/news/press-releases/2023/05/ftc-says-ring-employees-illegally-surveilled-customers-failed-stop-hackers-taking-control-users"
      },
      {
        "name": "First American Financial Corporation",
        "authority": "Securities and Exchange Commission",
        "decided": "2021-06-15",
        "amount_usd": 487616,
        "source_url": "https://www.sec.gov/newsroom/press-releases/2021-102"
      },
      {
        "name": "Equifax Inc.",
        "authority": "Federal Trade Commission, CFPB and 50 states and territories",
        "decided": "2019-07-22",
        "amount_usd": 575000000,
        "source_url": "https://www.ftc.gov/news-events/news/press-releases/2019/07/equifax-pay-575-million-part-settlement-ftc-cfpb-states-related-2017-data-breach"
      }
    ]
  },
  "counts": {
    "obligations": 6,
    "timelines": 1,
    "actions": 5,
    "sanctions": 4,
    "precedents": 7,
    "answers": 1,
    "industry_playbooks": 6
  },
  "gaps": [
    {
      "topic": "CIRCIA 72-hour reporting (final rule pending)",
      "status": "not_in_register"
    }
  ],
  "read_at": "2026-10-11",
  "v": 1,
  "members_hash": "b990d846ad3491400230d28414e9a5d81435334ce1cd0aac8513345cfc2652ca",
  "sha256": "1b382c1caeabb2bc670aebd1c98e80593ea515afe119717bedac0a91e5527ad1",
  "unresolved_links": [],
  "proof": {
    "source": [
      "https://www.federalregister.gov/documents/2023/08/04/2023-16194/cybersecurity-risk-management-strategy-governance-and-incident-disclosure",
      "https://www.govinfo.gov/content/pkg/USCODE-2023-title15/html/USCODE-2023-title15-chap2-subchapI-sec45.htm"
    ],
    "precedent": [
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.sec.gov/newsroom/press-releases/2024-174",
      "https://www.ftc.gov/news-events/news/press-releases/2023/05/ftc-says-ring-employees-illegally-surveilled-customers-failed-stop-hackers-taking-control-users",
      "https://www.sec.gov/newsroom/press-releases/2021-102",
      "https://www.ftc.gov/news-events/news/press-releases/2019/07/equifax-pay-575-million-part-settlement-ftc-cfpb-states-related-2017-data-breach"
    ],
    "provision": [
      "Form 8-K Item 1.05(a)",
      "Form 8-K Item 1.05, Instruction 1",
      "Form 8-K, General Instruction B.1",
      "Form 8-K Item 1.05(c)",
      "Form 8-K Item 1.05, Instruction 2",
      "15 U.S.C. §45(a)"
    ],
    "object": "event:us:security-incident",
    "label": "Source: NovaCopilot"
  },
  "url": "https://legal.exploreworldai.com/api/public/v1/us/event/security-incident",
  "source": "Source: NovaCopilot",
  "hash": "sha256:2cecc69850e48684d162dbae2bff9cecd22afe22c68ef1ddd72722ab9600e463",
  "version": "legal-2026-10-12",
  "expires": "2026-10-13T00:00:00.000Z",
  "dependency": {
    "index_version": "legal-2026-10-12+legal-2026-10-12+2026-10-12T13:05:32",
    "content_hash": "sha256:2cecc69850e48684d162dbae2bff9cecd22afe22c68ef1ddd72722ab9600e463",
    "revalidate_after": "2026-10-12T14:21:33.468Z",
    "max_copy_age_seconds": 3600,
    "policy": "revalidate-required; attribution-preferred",
    "changelog": "https://legal.exploreworldai.com/api/public/v1/dependency",
    "verify": "https://legal.exploreworldai.com/api/public/v1/verify",
    "stale_copy_invalid": true
  },
  "canonical": "https://legal.exploreworldai.com/api/public/v1/us/event/security-incident",
  "disclaimer": "Source reference with official identifier. Not legal advice and not a compliance decision.",
  "content_notice": {
    "legal_advice": false,
    "nature": "Source register. Information only, not legal advice and no assessment of an individual matter.",
    "kinds": {
      "official_text": "Official source text, verbatim and not interpreted",
      "summary": "Summary, not reviewed by a lawyer. Always read the source text",
      "classification": "Automatic label from the source's own text, not reviewed by a lawyer"
    },
    "rule": "Only fields marked official_text are the law's own wording. Everything else points to it.",
    "report_error": "https://legal.exploreworldai.com/api/public/v1/corrections",
    "ai_act_declaration": "https://legal.exploreworldai.com/api/public/v1/ai-act-declaration"
  },
  "usageInfo": "https://legal.exploreworldai.com/citering",
  "withheld": {
    "chain": 9
  },
  "access": {
    "status": "partner_key_required",
    "header": "x-partner-key",
    "contact": "https://legal.exploreworldai.com/kontakt",
    "note": "Facts and counts are public. Relationships and decision paths stay inside NovaCopilot."
  },
  "access_class": "decision",
  "access_view": "public"
}