Compliance Radar

Who was sanctioned, and for what?

Fines, court rulings and incidents from Europe and North America: 718 cases from 32 jurisdictions, each with an official source and checked against that source before publication. Filter by country, area of law and sector. Click a chart to drill down one level.

Capital markets and financial supervision Telecoms, IT and software Unisys Corp. Clear all filters

1case from 1 jurisdiction

€3.7mTotal of monetary amounts

€3.7mLargest single case: Unisys Corp.

€3.7mMedian per case with an amount

Click a bar to drill down one level.

by amount by number of cases

Where?

by region

All jurisdictions

USA €3.7m 100 % · 1 case

What for?

by topic

Disclosure and reporting obligations €3.7m 100 % · 1 case

Who?

by company

When?

per quarter, by date of decision

Trend
Period	Cases	Total
Q3 2023	0	—
Q4 2023	0	—
Q1 2024	0	—
Q2 2024	0	—
Q3 2024	0	—
Q4 2024	1	€3.7m
Q1 2025	0	—
Q2 2025	0	—
Q3 2025	0	—
Q4 2025	0	—
Q1 2026	0	—
Q2 2026	0	—
Q3 2026	0	—

1 case

Newest first Highest amounts

22 Oct 2024 Unisys Corp.SEC: $4 million against Unisys for downplaying cyber incidents after SolarWinds USADisclosure and reporting obligations €3.7m

In mandatory disclosures, Unisys presented cyber risks as hypothetical, although it had suffered two intrusions with data exfiltration connected with the SolarWinds compromise. On the same day, the US Securities and Exchange Commission (SEC) also imposed penalties on Avaya ($1 million), Check Point ($995,000) and Mimecast ($990,000).

What organisations can take from it

Do not describe cyber incidents that have occurred as a mere risk in investor information – disclosure processes must involve IT security.

Authority / court: U.S. Securities and Exchange Commission (SEC)
Area of law: Capital markets and financial supervision · Disclosure and reporting obligations
Legal basis: Securities Act of 1933, Securities Exchange Act of 1934 (inkl. Disclosure Controls)
Action: Fine
Status of proceedings: final
Sector: Telecoms, IT and software
Culpability: negligent
Mitigating circumstances: Cooperation in the proceedings and improvement of cybersecurity controls.
Published: 22 Oct 2024

Original amount 4,000,000 USD, converted at the ECB reference rate of 22 Oct 2024.

Sources

SEC Charges Four Companies With Misleading Cyber Disclosures Press release of an authority

Checked against the official source on 25 Sep 2026 · Direct link

Report an error

How the radar is compiled

Official sources only

Every case is based on a decision, press release or database of an authority or a court. Press and law-firm reports count at most as additional references.

Four-eyes check

Whoever enters a case may not approve it. A second, independent check compares company, date, amount and area of law with the source. Only then is the case published.

Comparable amounts

Amounts are converted at the ECB reference rate on the day of the decision. Each case also shows the original amount.

Corrections on record

A correction is a new version that is checked again. Every change is logged. You can report errors directly on each case.

Case texts are translated from the German original. Where a translation is not yet available, the German text is shown and marked “(German original)”. Names of authorities, laws and companies are given as in the source.

The radar reports on published decisions and is not legal advice. Decisions that are not yet final are marked as such where the status is known.

Embed the radar on your website

Who was sanctioned, and for what?

Ready for training that sticks?