A new SEC enforcement case a against dully registered broker-dealer and investment adviser for deficient cyber security procedures under Reg S-P and Reg S-ID resulting in sanctions and a $1 million civil money penalty. Expect to see many, many more, and similar FINRA cases coming soon. 

https://www.sec.gov/litigation/admin/2018/34-84288.pdf