It’s 2:00 pm. Do you know where your data records are? Here are the security headlines from the week of September 18, 2017.

• Say it ain’t so, SEC. Say it ain’t so! It looks like the U.S. Securities and Exchange Commission (SEC) suffered a cyber attack in 2016 . Hackers have been trading using non-public information.
• In more cybercrime news, Help Net Security has a list of most wanted malware and mobile malware .
• We’re all hoping the risk of wearable devices is worth the health benefit – or is that just what I tell myself about my FitBit? But what if the device data falls into the wrong hands?
• Any infosec pro will tell you: Only install applications from a trusted source. But what if that’s not enough? A tainted version of Ccleaner has been installed more than 2 million times since August .
• What a year it’s been … already. Dark Reading reports that 1.9 billion – you know, with a B – data records have been exposed so far in 2017.
• The Dark Web is rethinking selling ransomware . Somehow, I don’t think that will be good news in the end.