Disclosure · 35 filers

Enforcement Action

35 companies wrote this into a filing in the last 7 days, up from 21. Below: which of them, and what the corpus says they now owe.

Updated

35filers, current period
21the period before
33controls it touches
27frameworks

The long view

Filings containing this phrase, every month since 2008. The last point is the current month and is still filling, so it always looks lower than it will be.

 
0172343
2008 peak 343 in March 2021 2026

Who disclosed it

From SEC full-text search over 8-K filings. Every row links to the filing itself.

CompanyFormFiled
Neuphoria Therapeutics Inc. NEUP8-K2026-07-24filing
Jones Ventures INTL Acquisition1 Corp8-K2026-07-21filing
ACME UNITED CORP ACU8-K2026-07-21filing
Southern Cross Acquisition I Corp. NCO8-K2026-07-23filing
AMR Resources Acquisition Corp. AMAC8-K2026-07-21filing
NextTrip, Inc. NTRP8-K2026-07-22filing
KORE Group Holdings, Inc.8-K2026-07-21filing
KIDZ AI Inc.8-K2026-07-21filing
BOXABL Inc.8-K2026-07-23filing
INTEGRATED RAIL & RESOURCES INC.8-K2026-07-22filing
M&T BANK CORP8-K2026-07-21filing
FIRST FINANCIAL BANCORP /OH/ FFBC8-K2026-07-21filing

The full search on EDGAR

How it actually arrives

An 8-K's meaning is in its item number, not its text. These are the items the filings containing this phrase were filed under. The first group is something that happened to the company. The second is the phrase turning up in the ordinary course of reporting, most often in an earnings release, which is a very different thing and is usually the larger number.

Filed because something happened Companies
Other material event
Item 8.01
160
Director or officer departure
Item 5.02
114
Change of accountant
Item 4.01
10
Delisting or listing rule failure
Item 3.01
8
Bankruptcy or receivership
Item 1.03
2
Mentioned in routine reporting Companies
Financial statements and exhibits
Item 9.01
459
Entry into a material agreement
Item 1.01
401
Regulation FD disclosure
Item 7.01
151
Completion of an acquisition
Item 2.01
41
Results of operations, the earnings release
Item 2.02
19
Shareholder vote
Item 5.07
13

This is why a headline count on its own overstates the case. Where the routine number dominates, the phrase is being tracked as language rather than as events.

Which industries file it

Companies grouped by the industry classification on their own filing. A count, not a survey.

IndustryCompanies
Holding and investment offices104
Banking64
Chemicals and pharmaceuticals56
Software and IT services24
Electronics and electrical equipment23
Instruments and medical devices21
Industrial machinery17
Mining and extraction16
Not classified14
Retail13

What it obligates

Our corpus holds 33 controls across 27 frameworks whose text speaks to this. Not a judgement: these controls say so, and each is one lookup from its source document. Ordered by how much each framework has to say about it, so the one that will cost you the most work is first. Every name opens that framework in the corpus.

FrameworkControls
GLBA
United States
3
FCC Customer Proprietary Network Information (CPNI) and Data Breach Rules (47 CFR 64.2001-2011) verified
United States (FCC)
3
Japan Act on Specified Commercial Transactions (ASCT) verified
Japan (CAA)
2
Greece Law 4624/2019 verified
Greece
2
Family Educational Rights and Privacy Act (FERPA) verified
United States
1
Montana Consumer Data Privacy Act verified
United States - Montana
1
Iowa Consumer Data Protection Act verified
United States - Iowa
1
Indiana Consumer Data Protection Act verified
United States - Indiana
1
Kentucky Consumer Data Protection Act verified
United States - Kentucky
1
Arizona Air Quality Regulations (ADEQ / ARS Title 49 / AAC Title 18 Chapter 2) verified
Arizona, United States
1
CIRCIA (Cyber Incident Reporting for Critical Infrastructure Act) verified
United States
1
Florida Digital Bill of Rights (FDBR) verified
United States
1
ITAR verified
United States (State Department)
1
FTC Health Breach Notification Rule verified
United States
1

What an auditor will ask you to produce

The artefacts named on those controls, most frequently cited first.

How it usually fails

Recorded when each control was verified against its source. This is where programmes that think they are covered turn out not to be.

Where this comes from

The left half is public record: SEC full-text search over 8-K filings, counted across a 7 day window against the equivalent window before it. You can check every row.

The right half is ours: 723 frameworks and 20,473 controls, 531 of those frameworks verified against their source documents, with the auditor evidence and common failure modes recorded control by control. Controls appear here because their own text names this term.

Today's edition · How programmes fail · The obligation index