Photo of Tom Bednar

Tom Bednar’s practice focuses on securities enforcement and litigation, white-collar criminal defense, and litigation.

The following is part of our annual publication Selected Issues for Boards of Directors in 2026. Explore all topics or download the PDF.


Fiscal year 2025 was a year of extremes in terms of the number of enforcement actions brought by the Securities and Exchange Commission (SEC). During the first quarter of fiscal year 2025 (October through December 2024), the SEC reported a record-breaking number of enforcement actions.[1] However, for the remainder of the fiscal year, the SEC’s enforcement numbers significantly declined. Despite the reduction in enforcement actions seen in the second half of the year, there are early indications that enforcement under the second Trump administration is not disappearing but instead shifting focus. Public companies should expect continued SEC enforcement focused on fraud and harm to investors, and should remain mindful of the SEC Enforcement Division’s emphasis on voluntary report and cooperation.Continue Reading The Shifting SEC Enforcement Landscape: 2025 Year-in-Review

The following is part of our annual publication Selected Issues for Boards of Directors in 2025Explore all topics or download the PDF.


The SEC pursued multiple high profile enforcement actions in 2024, alongside issuing additional guidance around compliance with the new cybersecurity disclosure rules. Together these developments demonstrate a continued focus by the SEC on robust disclosure frameworks for cybersecurity incidents. Public companies will need to bear these developments in mind as they continue to grapple with cybersecurity disclosure requirements going into 2025.Continue Reading Cybersecurity Disclosure and Enforcement Developments and Predictions

The following is part of our annual publication Selected Issues for Boards of Directors in 2025Explore all topics or download the PDF.


The Securities and Exchange Commission (SEC) and Department of Justice (DOJ) both had active enforcement years in 2024. The SEC’s aggressive focus on crypto enforcement continued, resulting in the filing and continued litigation of several cases in federal courts nationwide. The DOJ announced a number of policy updates in 2024, including guidance related to voluntary disclosures and corporate enforcement, and remained active in the foreign corruption and national security spaces. Finally, both the SEC and DOJ have increased their focus on AI and new technologies, showing increasing concern about the risks associated with AI, with the DOJ issuing guidance on AI in compliance programs and the SEC bringing cases related to misleading marketing about the use of AI in investment strategies. As noted more fully below, with the incoming Trump Administration, enforcement priorities at both SEC and DOJ are expected to shift. The SEC is expected to have a renewed focus on traditional enforcement areas, such as accounting fraud, misrepresentations in securities offerings and insider trading, with significant reductions in enforcement activity related to crypto, cyber incidents and ESG issues. The DOJ is likely to continue its focus on FCPA and national security (including sanctions and export controls), while devoting increasing resources to immigration and violent crime. Additionally, the benefits of cooperation are likely to increase at both the SEC and DOJ, with the potential for reduced penalties for companies able to effectively demonstrate their cooperation and self-remediation.Continue Reading An Active Year in Enforcement, with Changes to Come

The following post was originally included as part of our recently published memorandum “Selected Issues for Boards of Directors in 2024”.

In July 2023, the U.S. Securities and Exchange Commission (SEC) adopted final rules to enhance and standardize disclosure requirements related to cybersecurity.  In order to comply with the new reporting requirements of the rules, companies will need to make ongoing materiality determinations with respect to cybersecurity incidents and series of related incidents.  The inherent nature of cybersecurity incidents, which are often initially characterized by a high degree of uncertainty around scope and impact, and an SEC that is laser-focused on cybersecurity from both a disclosure and enforcement perspective, combine to present registrants and their boards of directors with a novel set of challenges heading into 2024.Continue Reading Crossing a New Threshold for Material Cybersecurity Incident Reporting

On October 26, 2022, the Securities and Exchange Commission adopted final rules implementing the Dodd-Frank requirement for issuers to recover incentive-based compensation erroneously paid to current and former executive officers due to an accounting restatement.

These rules were originally proposed in July of 2015, and subsequently reopened for comment in October 2021 and June 2022.3