Ransomware group file SEC complaint that their hacked victim didn't report the breach within time limit.