Eden Winokur and James Morvell discuss the continuous disclosure obligations on companies subject to cyber attacks. When should you notify the regulators and what are you required to disclose? What are the consequences if you don’t notify?