The U.S. SEC settled record keeping charges against an ICBC unit over a 2023 ransomware attack, citing lack of bookkeeping and transaction notifications. No civil fine was imposed due to cooperation and remedial actions taken. The ICBC unit settled without admitting guilt.