Thelens.Slaughterandmay FCA Guidance on Cyber Incident Disclosure Obligations
Article Content
- •FCA guidance clarifies inside information obligations for companies facing cyber incidents.
- •Organizations must assess the scale and impact of cyber incidents to determine disclosure needs.
- •Collaboration between regulators and industry aims to improve information sharing and market integrity.
On September 30, 2026, the FCA issued guidance for companies on managing inside information obligations during cyber incidents. This guidance clarifies how organizations should assess whether a cyberattack constitutes inside information that must be disclosed under UK Market Abuse Regulation. Companies must evaluate the scale of the incident, including potential data compromise and operational disruption. The guidance emphasizes the need for ongoing reassessment as the situation evolves. It aims to help issuers navigate their legal obligations while maintaining market integrity. The collaboration between the FCA, NCSC, and industry stakeholders highlights the importance of timely information sharing in enhancing cyber resilience across sectors.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Common questions
What should companies do if they experience a cyber incident?
How often should companies reassess their situation during a cyber incident?
What are the conditions for delaying disclosure of inside information?
Continue Reading
PHP2Shell Vulnerabilities Exploited by AI-Driven Attackers Threat actors have exploited PHP2Shell vulnerabilities (CVE-2026-109618 and CVE-2026-109619) to target a government entity in Europe, gaining access to sensitive data within two hours of the initial breach. The attackers utilized AI tools for reconnaissance and post-exploitation activities, including accessing…