The regulator has asked for internal communications of affected companies about the cyber attack's impact, probing for gaps in corporate security and for other cyber incidents, the report said, citing people familiar with the matter who did not identify the companies.