There’s a new front in the data breach wars: the U.S. Securities and Exchange Commission.

On Tuesday, the agency announced its first-ever case charging a public company with failing to properly inform investors of a cyber-breach. Altaba, formerly known as Yahoo! Inc., agreed to pay $35 million to settle charges that it misled shareholders by failing to disclose a massive data breach in 2014.