“We must be vigilant.” The SEC said the Edgar hack did not result in access to personally identifiable information, and it did not specify which companies were exploited in the cyberattack.