On Tuesday, the SEC announced that it had filed a settled enforcement action against R.T. Jones Capital Equities Management, an investment adviser. The enforcement action related to the firm’s alleged failure to “establish the required cybersecurity policies and procedures in advance of a breach that compromised the personally identifiable information (PII) of approximately 100,000 individuals, including thousands of the firm’s clients.” Notably, the R.T Jones matter is the first enforcement action that the SEC has ever brought against a regulated entity for a cybersecurity-related violation.
