SEC v. Unisys Corporation (2024)
Settled
Checked against the primary document on October 3, 2026. The library's summary, tags and figures for this record were compared with the regulator's own document by an AI model (Claude) following written instructions, with sampled and disputed records read a second time. No lawyer has reviewed them. A checked record can still contain errors, and checked does not mean endorsed. See how we check records or report a correction.
In October 2024 the Securities and Exchange Commission settled with Unisys over materially misleading statements about cybersecurity risks and events arising from the SolarWinds compromise discovered in December 2020, and over disclosure-controls failures. Unisys agreed to a cease-and-desist order and a $4 million penalty. The order concerns disclosure, not insider trading.
The record
| Agency | SEC |
|---|---|
| Release number | 3-22272 |
| Date filed | 2024-10-22 |
| Date resolved | 2024-10-22 |
| Status | settled |
| Asset class | equities |
| Venue | NYSE |
| Criminal parallel | No |
| Defendants | Unisys Corporation |
| Cited as charged or alleged | Exchange Act s.13(a) ; Securities Act s.17(a) |
| Techniques |
What was ordered
- Civil penalty
- $4m
- Disgorgement
- —
- Prejudgment interest
- —
- Total relief
- $4m
- Alleged gain
- —
What is alleged to have happened
The Securities and Exchange Commission issued this settled order on October 22, 2024 (Securities Act Release No. 11323).
The order finds the company negligently described its cyber risk and incidents and violated disclosure-controls rules, citing Sections 17(a)(2) and 17(a)(3) of the Securities Act and Section 13(a) of the Exchange Act.
For the regulator's own account of the facts, read the primary document linked above. This page deliberately summarises the structured record rather than reproducing the release.
Timeline
Primary documents
Everything on this page derives from the documents below. Where our summary and the primary document disagree, the primary document is right.