Ransomware gang files SEC complaint over victim's undisclosed breach

Interesting case; assuming that the breach is real, does SEC qualify evidence obtained through a crime?