The SEC announced a settlement with OTC Link on 22 September 2026 over repeated failures involving Regulation SCI, the framework for certain market systems. The action concerns controls and compliance; the announcement should not be recast as a report of a confirmed customer-data breach.
Research checked: 26 September 2026. Reporting is based on the linked primary publication; analysis is identified in the text.
The regulator’s findings
The SEC says failures between August 2016 and March 2025 involved written policies and procedures for systems security, access controls and vulnerability testing and remediation. Its announcement describes repeated examination concerns. OTC Link agreed to a censure and a $575,000 civil penalty without admitting or denying the findings.

Why documentation is part of infrastructure
A trading system is not made resilient simply by buying security tools. Defined responsibilities, testing and a process for resolving identified weaknesses give an operator a way to demonstrate that controls are actually maintained. This is an operational observation, not a claim that the settlement establishes any particular trading loss. The findings and the consequences of a hypothetical outage must be kept separate.
Related context: TBJ’s background on authentication and security controls.

The investor-facing distinction
An enforcement action can highlight a weakness without providing evidence that every transaction processed by a business was affected. Readers should look for the specific conduct, dates and remedy in the regulator’s statement. The monetary penalty is a regulatory sanction, not a stated compensation amount for each customer. The case is a reminder that market infrastructure depends on continuing controls, and that a compliance history can matter independently of headline trading volumes.

Sources and reporting scope
Prepared from public sources with AI assistance. No original interviews or independent product testing are claimed. Cover and inline visuals are AI-generated illustrations.

