The U.S. Securities and Exchange Commission has sued law firm Covington & Burling for details about nearly 300 of the firm’s clients whose information was accessed or stolen by hackers in a previously undisclosed cyberattack, court documents show.
Hackers associated with the Hafnium cyber-espionage group, which has alleged ties to the Chinese government, gained access to Covington’s computer networks around November 2020, accessing private information about the firm’s clients, including 298 publicly traded companies, according to a lawsuit filed Tuesday by the SEC.
The agency asked a federal judge in Washington, D.C., to force Covington to comply with a subpoena asking the firm to turn over the companies’ names, saying it is investigating possible securities violations associated with the hack.
Source: SEC sues Covington law firm for names of 300 clients caught up in hack | Reuters