Gibson Dunn's Securities Enforcement 2026 Mid-Year Update was published approximately one week ago. The report is the definitive public reference on what the SEC's Division of Enforcement will pursue in H2 2026. It is written for securities litigation partners and white-collar defense counsel, not for corporate CFOs.
Gibson Dunn confirmed its own prediction: "As we anticipated in our 2026 Securities Enforcement Mid-Year Update, accounting, financial reporting, and disclosure matters are shaping up to occupy a significant share of the Division's docket." That confirmation came in Gibson Dunn's August 5 client alert on the creation of the new Financial Reporting and Accounting Unit, making the mid-year update and the unit announcement a single coherent enforcement signal.
This post translates three specific financial reporting enforcement patterns from the Gibson Dunn mid-year update into operational terms for disclosure committees, audit committees, and CFOs who need to understand what the SEC is now structurally equipped and specifically motivated to pursue in Q3 and Q4 2026.
The companion blog published yesterday in this cluster covers the Financial Reporting and Accounting Unit announcement itself: its mandate, its leadership under Timothy Zimmerman, the ADM and Key Tronic cases it will build on, and what internal controls reviews to run before Q3 close. This blog covers the broader enforcement landscape from the Gibson Dunn mid-year update that explains why the unit's creation was predictable and what specific disclosure risks the patterns create.
What Does Gibson Dunn's 2026 Mid-Year Enforcement Update Confirm About H2 Priorities?
Three successive Division leaders have identified the same core priorities: offering and retail fraud, accounting and disclosure fraud, insider trading, market manipulation and wash trading, and breaches of fiduciary duty or misuse of client assets by investment advisers.</cite>
The three leaders are: SEC Commissioner Mark Uyeda, in his first public remarks delivered to the Los Angeles County Bar Association in February 2026, who targeted bad actors which Chairman Atkins refers to as "the liars, cheats, and thieves." Then Acting Director Waldon, who carried that message at the 2026 SEC Speaks conference in March, assuring attendees that the enforcement program remained "full steam ahead" and that the Division would pursue "quality over quantity." And Director Woodcock, in his May 2026 remarks at the MFA Legal and Compliance Conference, who pledged a return to "back to basics" enforcement with "hands-on leadership" and a "focus on the fundamentals."
The consistent articulation of the same five priorities across three different leaders is not rhetorical repetition. It is the signal that the priorities are institutionally committed rather than dependent on any individual leader's preferences.
Woodcock's streamlined set of enforcement priorities gave equal billing to cases affecting market integrity: those involving financial reporting and private funds and investment advisers. Woodcock worked as a Big Four auditor before becoming a lawyer, and his prior enforcement experience includes creating and chairing the SEC's Financial Reporting and Audit Task Force in the mid-2010s, which focused on complex financial reporting investigations.
The Gibson Dunn mid-year update identifies three patterns within those priorities that are most relevant to CFOs of public companies. Each pattern involves a specific type of disclosure or accounting failure, a specific legal theory, and a specific individual liability risk that CFOs and other named executives face.
Pattern #1: Accounting Fraud With Individual CFO and Executive Liability, Not Just Corporate Settlements
The first and most significant pattern from the Gibson Dunn mid-year update for public company CFOs: accounting fraud cases where the SEC charges individual executives, including CFOs, in addition to (or instead of) the corporate entity.
The pattern reflects a deliberate enforcement philosophy: cases affecting market integrity, financial reporting, and private funds will receive equal priority alongside traditional fraud cases. The individual liability dimension is the aspect that distinguishes the current enforcement pattern from prior periods.
The Atkins-era corporate settlement approach offers remediation credit for companies that self-report, cooperate, and remediate. But that remediation credit does not protect the individuals who made the decisions that produced the misstatement. The SEC's approach, confirmed across both the ADM (January 2026) and Key Tronic (April 2026) cases, is to settle with or bring charges against the corporate entity, with credit for cooperation and remediation, while separately assessing individual officers based on the specific facts of their conduct.
What this means for CFO certification practice: the SOX 302 and 906 certifications are signed by the CEO and CFO personally. In an accounting fraud enforcement case, those certifications are exhibits in the enforcement record from day one. A CFO who signed a 302 certification stating the financial statements fairly present results, when the financial statements contained a material misstatement the CFO knew or should have known about, faces individual enforcement exposure regardless of the company's cooperation and remediation.
The specific accounting fraud patterns the mid-year update signals for H2: segment-level disclosure manipulation (ADM pattern), books and records failures producing inaccurate consolidated statements (Key Tronic pattern), and revenue recognition timing manipulation where management accelerated revenue recognition to meet quarterly targets.
The practical CFO action item arising from Pattern #1: before signing the Q3 2026 SOX 302 certification, the CFO should specifically confirm with the controller, general counsel, and outside audit counsel whether any revenue recognition judgment, segment profitability characterisation, or accounting estimate was made in Q3 with a quality that falls below the standard the CFO would be comfortable defending if scrutinised by the new enforcement unit's attorneys and accountants.
Pattern #2: Rule 10b5-1 Plan Insider Trading With Parallel Disclosure Violation Charges
The Gibson Dunn mid-year update discusses a novel insider trading action brought by the New York Attorney General in January 2026, charging the former CEO of Emergent BioSolutions with adopting a Rule 10b5-1 trading plan while aware of material nonpublic information about manufacturing contamination problems, and then selling approximately $10.1 million in stock before those problems became public. The company simultaneously settled through an assurance of discontinuance with a $900,000 penalty, while the litigated case against the former executive remains pending.
The case is extraordinary in multiple respects, not least of which being that it is rare for state attorneys general to bring insider trading cases, which are the traditional purview of the U.S. Department of Justice and the Commission. But the case is significant for the disclosure angle independent of the NYAG's jurisdictional novelty: adopting a Rule 10b5-1 plan while in possession of MNPI about manufacturing problems that were not yet disclosed is simultaneously an insider trading allegation and a disclosure failure allegation.
The disclosure failure dimension: if the manufacturing problems were material, the company had an obligation to disclose them under Item 303 (known trends and uncertainties material to future results) and potentially under Item 105 (risk factors, updated for material new developments). The executive allegedly adopted the 10b5-1 plan while those problems had not yet been disclosed, meaning the company's disclosure controls failed to capture and communicate the manufacturing issues before the executive's trading decision.
For public company CFOs, the Rule 10b5-1 pattern raises three specific disclosure compliance questions.
First: does the company's Rule 10b5-1 plan adoption process include a representation from the adopting executive that they are not in possession of MNPI? Most large companies have implemented this as part of their insider trading compliance programmes, but the representation should be specific to the material risks present at the time of adoption, not a generic blanket representation.
Second: does the disclosure committee's review process specifically assess whether material operational, regulatory, or business developments known to management have been disclosed or are under review for disclosure, before any executive adopts or modifies a Rule 10b5-1 plan? The failure to disclose material information that existed at the time of plan adoption is the specific legal exposure the Emergent BioSolutions case illustrates.
Third: are there any material operational issues known to management at the time of this reading that have not yet been assessed for disclosure? The Q3 close process is the appropriate checkpoint for this question, and the disclosure committee's final meeting before the SOX 302 certification is signed should specifically address it.
Pattern #3: Private Fund Fee Disclosure Failures Producing Enforcement Actions
The third pattern from the Gibson Dunn mid-year update is specifically relevant to companies that are PE-owned or that have significant PE investor relationships, and to the investment adviser community more broadly.
The SEC recently settled claims against a formerly registered investment adviser and private fund manager concerning the sufficiency of established fair valuation procedures for principal sales of loans to private fund clients during a period of extreme market dislocation. Without admitting or denying the SEC's allegations, the adviser agreed to settle negligence-based violations and a $900,000 penalty.
>During periods of unusual market volatility, the Commission expects advisers to consider the potential need to go beyond established valuation procedures to validate fair value for principal and other related-party transactions.
The mid-year update signals that private fund fee and expense disclosure cases will continue in H2 2026. The pattern in these cases: investment advisers charge fees or allocate expenses to fund clients in ways that are not fully disclosed in the fund's offering documents or periodic reports to investors. The SEC brings these cases under Section 206 of the Investment Advisers Act as breaches of fiduciary duty.
For CFOs of public companies, the private fund pattern is relevant in two specific contexts.
Context 1: PE-backed companies whose PE sponsor is itself an SEC-registered investment adviser. If the company's PE owner is under SEC examination or enforcement inquiry related to fee disclosure or valuation practices, that inquiry may extend to the company's own financial data as part of the fund's portfolio company reporting. The company's financial reporting team may receive SEC information requests in that context.
Context 2: companies that have private fund investments on their own balance sheet (alternative investments, limited partnership interests, fund-of-fund structures). These investments are carried at fair value under ASC 820, and the fair value measurements rely on information from the fund manager. If the fund manager is under SEC scrutiny for valuation practices, the company's own fair value measurements for those investments may be subject to enhanced auditor scrutiny.
The practical disclosure committee action item for Pattern #3: if any member of the board or executive team is also a managing partner or senior officer of a PE firm that manages funds invested in the company, confirm that the related party disclosures under Item 404 accurately describe those relationships. The intersection of executive dual roles and PE fund relationships is precisely the context where MNPI and fee disclosure issues arise.
What Is the "Genuine Harm and Bad Acts" Standard Atkins Uses to Select Cases?
SEC Commissioner Uyeda framed the enforcement philosophy with specific language: bad actors are "the liars, cheats, and thieves" Chairman Atkins targets. Director Woodcock pledged "back to basics" enforcement and "quality over quantity."
The Cooley Securities Litigation review from December 23, 2025 described the case selection standard that emerged from the first months of the Atkins administration: cases where there is a genuine investor harm and a clearly identifiable bad actor, rather than cases where the primary violation is a technical compliance failure with no identified victim.
This standard has specific implications for understanding which financial reporting cases the new enforcement unit will pursue.
Cases most likely to be pursued: those where investors demonstrably suffered economic harm from the misstatement, where an individual officer made a specific decision that produced the misstatement and signed certifications attesting to the accuracy of statements they knew to be inaccurate, and where the evidence is specific and documentary rather than relying on circumstantial inferences about intent.
Cases less likely to be pursued: technical disclosure failures without identified investor harm, accounting judgments made in good faith that turned out to be wrong, and regulatory compliance deficiencies that were remediated before investors were harmed.
The practical implication: the case selection standard does not protect companies from enforcement risk simply because their accounting failures were negligent rather than intentional. Key Tronic involved books and records failures without evidence of deliberate fraud, and enforcement charges were brought. The standard is more about harm and evidence quality than about the severity of the misconduct.
For disclosure committee practice: the genuine harm and bad acts standard means that a financial reporting failure that causes investors to make economic decisions based on materially false information is an enforcement target under the current standard, regardless of whether the failure was intentional. The internal controls review before Q3 close should focus on whether any potential financial reporting error could produce this type of investor harm, not only on whether any intentional misconduct occurred.
How Does the New Financial Reporting Unit Accelerate These Three Patterns?
Gibson Dunn anticipated the unit's creation in its 2026 mid-year update, noting that accounting, financial reporting, and disclosure matters were shaping up to occupy a significant share of the Division's docket.
The unit accelerates all three patterns in a specific structural way: it removes the resource competition between financial reporting cases and other enforcement priorities. Before August 5, a financial reporting fraud investigation at the Division competed for staff time with insider trading cases, market manipulation cases, and private fund cases across the Division's general pool of attorneys and accountants. The new unit has dedicated staff whose sole assignment is financial reporting and accounting cases.
For Pattern #1 (accounting fraud with individual liability): the unit's dedicated attorneys and accountants can pursue multiple complex accounting investigations simultaneously. Previously, a multi-defendant accounting case might have been deprioritised because staff resources were allocated to higher-urgency matters. The new unit eliminates that deprioritisation risk.
For Pattern #2 (Rule 10b5-1 with disclosure violations): the disclosure failure dimension of an insider trading case has historically been handled by different staff than the insider trading dimension. The new unit, which covers "accounting and financial reporting cases," is positioned to investigate the disclosure failure component with dedicated expertise, potentially bringing those cases faster and with more technical accounting support for the legal theory.
For Pattern #3 (private fund valuation and fee disclosure): the unit's mandate includes "general misconduct in the accounting and auditing areas," which encompasses valuation methodology failures and fee disclosure deficiencies when those failures constitute securities violations. The unit's accountant staff provides the technical valuation expertise needed to build those cases, expertise that was previously distributed across the Division's general staff.
What Does "Financial Reporting Fraud as a Top Three Priority" Mean in Practice?
Woodcock's streamlined enforcement priorities gave equal billing to financial reporting alongside traditional fraud and insider trading, a clear signal that financial reporting cases will remain at the centre of the Division's docket.</cite>
Equal billing means resource allocation. In a Division that is pursuing "quality over quantity," equal billing for financial reporting alongside traditional fraud and insider trading means that the Division will allocate enforcement resources to financial reporting investigations at the same priority level as its highest-profile case categories.
The practical consequence for public companies: the probability of a well-documented, material financial reporting misstatement resulting in an SEC investigation is higher in H2 2026 than at any time since the creation of the SEC's original Financial Reporting and Audit Task Force in 2013. The new unit provides both the motivation (Woodcock's priority) and the capacity (dedicated staff) to pursue those investigations.
The investor harm threshold: a financial reporting misstatement does not need to be discovered through a restatement or shareholder lawsuit to come to the Division's attention. The Division receives referrals from the SEC's Division of Corporation Finance (comment letters that reveal disclosure deficiencies), from the Division of Examinations (examination findings about registered entities), from PCAOB inspection findings, from whistleblowers, and from its own market surveillance. The new unit gives each of those referral pathways a dedicated recipient with the accounting expertise to assess the referral's enforcement potential efficiently.
What Should Your Disclosure Committee and Audit Committee Do Before Q3 Close?
Six specific actions arising from the three Gibson Dunn patterns, for the disclosure committee and audit committee in the six weeks before Q3 close (September 30).
One: assess segment-level MD&A accuracy against actual economics. The ADM pattern establishes that segment MD&A is an enforcement target when it does not accurately reflect intersegment transaction economics. For any company with segment-level MD&A, confirm that the segment profitability discussion reflects the actual economic drivers of segment performance, including intersegment pricing and allocation policies.
Two: confirm the Rule 10b5-1 plan adoption protocol is current and complete. Any executive who adopted, renewed, or modified a Rule 10b5-1 plan in Q3 2026 should have made a documented representation at adoption that they were not in possession of material nonpublic information. The disclosure committee should confirm that all material operational, regulatory, or business developments known to management as of the plan adoption date were either disclosed or assessed for disclosure.
Three: review all related party disclosures for PE-sponsored companies or companies with fund investments. Pattern #3 is specifically relevant where executive dual roles, fund-related fee structures, or PE sponsor transactions with the company are not fully disclosed under Item 404.
Four: confirm that all material accounting estimates made in Q3 are supported by documented analysis, not just by reference to prior periods. The new unit has dedicated accountants who can assess whether accounting estimates were made with adequate basis.
Five: confirm the Q3 disclosure committee minutes reflect a specific discussion of whether any material development known to management has not yet been assessed for disclosure. The most common source of disclosure failure in insider trading cases is a material issue that management was aware of but disclosure counsel had not yet formally assessed.
Six: brief the audit committee chair on the three patterns and the August 5 enforcement unit at the Q3 audit committee meeting. The audit committee is the board-level governance body with oversight responsibility for financial reporting integrity. The three patterns and the new enforcement unit's creation are material developments in the regulatory environment that the audit committee should be aware of before Q4 audit planning begins.
Frequently Asked Questions
What are the SEC's top enforcement priorities in H2 2026?
Three successive Division leaders identified the same five core priorities: offering and retail fraud, accounting and disclosure fraud, insider trading, market manipulation and wash trading, and breaches of fiduciary duty or misuse of client assets by investment advisers. Gibson Dunn confirmed in its August 5 alert that accounting, financial reporting, and disclosure matters are shaping up to occupy a significant share of the Division's docket in H2 2026.
What accounting fraud cases has the SEC brought in 2026?
The two major accounting enforcement cases in H1 2026 are ADM (January 2026), involving intersegment transfer pricing manipulation in MD&A segment disclosures, and Key Tronic (April 2026), involving books and records failures and internal controls deficiencies producing inaccurate financial statements. Both resulted in individual charges alongside corporate settlements. The Cornerstone Research H1 FY2026 report confirmed all five enforcement actions against public companies in H1 were accounting or disclosure-related.
Does the Atkins SEC still pursue financial reporting enforcement?
Yes. The creation of a dedicated Financial Reporting and Accounting Unit on August 5, 2026 is the clearest possible statement that financial reporting enforcement is a priority, not a deprioritised area. Woodcock's enforcement philosophy, aligned with Atkins's "liars, cheats, and thieves" framing, targets genuine investor harm and bad actors, which accounting fraud cases clearly represent. The Atkins deregulatory agenda applies to rulemaking, not to fraud enforcement.
What is the Rule 10b5-1 plan disclosure risk in H2 2026?
The Emergent BioSolutions case brought by the New York Attorney General in January 2026 alleged that a former CEO adopted a Rule 10b5-1 trading plan while aware of material nonpublic information about manufacturing contamination problems, then sold approximately $10.1 million in stock before those problems became public. The case illustrates the disclosure violation dimension of insider trading: adopting a 10b5-1 plan while in possession of material undisclosed information is simultaneously an insider trading allegation and a disclosure failure allegation.
How does the new Financial Reporting and Accounting Unit change enforcement pace?
The unit provides dedicated attorneys and accountants with specialised expertise in financial reporting, accounting, and auditing. It removes the resource competition that previously limited the pace of financial reporting investigations, allowing the Division to pursue multiple complex accounting cases simultaneously without deprioritising them in favour of other case types.
Key Takeaways
- Gibson Dunn's 2026 Securities Enforcement Mid-Year Update, published approximately one week ago, identified three financial reporting patterns for H2 2026: accounting fraud with individual CFO and executive liability, Rule 10b5-1 insider trading with parallel disclosure violation charges, and private fund fee and valuation disclosure failures.
- Three successive Division leaders confirmed the same five enforcement priorities, with accounting and disclosure fraud listed equally alongside traditional fraud and insider trading.Gibson Dunn confirmed the August 5 enforcement unit announcement was anticipated by its mid-year update, stating that accounting, financial reporting, and disclosure matters are shaping up to occupy a significant share of the Division's docket.
- Pattern #1 (accounting fraud with individual liability): the ADM and Key Tronic cases establish that both segment MD&A manipulation and books and records failures produce individual charges against CFOs and other executives, independent of the company's cooperation credit.
- Pattern #2 (Rule 10b5-1 with disclosure violations): the Emergent BioSolutions case illustrates that adopting a trading plan while aware of material undisclosed operational problems creates simultaneous insider trading and disclosure failure exposure. Disclosure committees must confirm all material known issues are assessed for disclosure before any executive adopts or modifies a trading plan.
- Pattern #3 (private fund disclosure failures): valuation methodology failures and fee disclosure deficiencies in PE fund contexts generate enforcement actions. For PE-backed public companies and companies with fund investments, related party disclosures under Item 404 and ASC 820 fair value measurements warrant specific review.
- Woodcock's "back to basics" enforcement philosophy targets genuine investor harm, not technical compliance failures. But accounting fraud cases with identifiable investor harm are exactly the cases that meet this standard. The new unit has the dedicated expertise to assess financial reporting investigations efficiently.
- Six pre-Q3-close actions: segment MD&A economic accuracy review, Rule 10b5-1 protocol confirmation, related party disclosure review, accounting estimate documentation audit, disclosure committee MNPI assessment confirmation, and audit committee briefing on the three patterns and the August 5 unit.
