Credit-Rating Industry Faulted for Weak Cybersecurity

U.S. securities regulators faulted the credit-rating industry for a variety of lapses in adhering to Securities and Exchange Commission rules, including lax cybersecurity. In two annual SEC staff reports based on reviews of the 10 credit-rating firms registered with the agency, the agency said the industry’s largest players lacked sufficient internal systems to prevent the “misuse or inappropriate dissemination” of sensitive or restricted information about the firms and entities they rate.