Not it isn’t. “Undisclosed” is an adjective. The title says that the SEC penalized Yahoo for a “cyber theft” that was “massive” and “undisclosed.”

“SEC Penalizes Yahoo $35M for Non-Disclosure of Massive Cyber Theft” would be better.