This week, the U.S. Securities and Exchange Commission and Altaba Inc., (formerly known as Yahoo! Inc), came to a $35 million settlement over the company’s alleged failure to disclose a massive data breach that was discovered in 2014 but, according to the commission, was not reported to investors until 2016.

Attorneys who work on cybersecurity matters believe this action will be far from the last of its kind—and that the SEC will continue to pursue publicly traded companies that it believes are not keeping investors informed enough.