The spam claims certainly violate a number of SEC regulations.
I believe it violates Federal law. The spam email I traced came from a computer in Beijing; obviously they'd backdoored their way in. AND they were spoofing the email address of a real company.