It's the second time a former employee has been charged with selling off stock prior the public announcement of the company's massive data breach.

The SEC said Yahoo didn't properly investigate or consider whether to inform investors of its 2014 breach, which didn't become public until two years later.

Corporations need to do more to protect investors from the financial damages of data beaches, an SEC commissioner says.

Jun Ying allegedly concluded that Equifax had been breached and sold all of his stocks weeks before the company went public with the information.

The unanimously approved guidance details the ways in which publicly traded companies ought to be transparent with investors and other stakeholders when it comes to cyber risk.

The settlement is a significant hit for a company with fast evaporating cash reserves and revenue — and little explanation as to why things have gone so badly.