The U.S. Securities and Exchange Commission announced London-based educational publishing company Pearson will pay $1 million to settle allegations it misled investors about a 2018 cyber breach. The SEC said Pearson referred to the incident as a hypothetical risk in 2019, when it had already occurred, compromising millions of student records and 13,000 administrator account log-ins. The company earlier announced birth dates and email addresses may have been compromised when it knew the data was impacted, the SEC said.