Attorney General James Reaches Agreement with Refuah Health Center to Invest $1.2 Million to Protect Patient Data and Pay $450,000 in Penalties to State

January 5, 2024 NEW YORK – New York Attorney General Letitia James today announced an agreement with a Hudson Valley-area health care provider, Refuah Health Center, Inc. (Refuah), for failing to safeguard the personal and private health information of… Continue reading Attorney General James Reaches Agreement with Refuah Health Center to Invest $1.2 Million to Protect Patient Data and Pay $450,000 in Penalties to State

DFS Announces $1 Million Cybersecurity Settlement With First American Title Insurance Company

Press Release of November 28: The New York State Department of Financial Services (DFS) today announced that First American Title Insurance Company (First American) will pay a $1 million penalty to New York State for violations of DFS’s Cybersecurity R… Continue reading DFS Announces $1 Million Cybersecurity Settlement With First American Title Insurance Company

States settle with Morgan Stanley for $6.5 million over data security incidents

In addition to Florida, represented by Consumer Protection Division Multistate and Privacy Bureau Chief Patrice Malloy and Senior Assistant Attorney General Diane Oates, the following states joined the action: Connecticut, Indiana, New Jersey, New York… Continue reading States settle with Morgan Stanley for $6.5 million over data security incidents

Minnesota schools turn to voters, plead for lawmaker help in fending off cyberattacks

Dana Ferguson reports: Faced with a growing threat of cybersecurity breaches, school districts around the country and in Minnesota are turning to local taxpayers and state officials for help in building up their defenses. Voters in at least 17 communit… Continue reading Minnesota schools turn to voters, plead for lawmaker help in fending off cyberattacks

NYDFS Updates Its Cybersecurity Regulation to Protect Against Growing Cyber Threats

Hunton Andrews Kurth writes: On November 1, 2023, New York Governor Hochul announced that the New York State Department of Financial Services (“NYDFS”) amended its Cybersecurity Regulation applicable to covered financial institutions. Our previous blog… Continue reading NYDFS Updates Its Cybersecurity Regulation to Protect Against Growing Cyber Threats

Colorado GOP Wants Inquiry into Delayed Notification of Data Breach

David Migoya reports: Colorado House Republican leaders on Monday called for an investigation into why Colorado’s higher education agency allegedly failed to timely report a massive data breach this summer. In a two-page letter hand-delivered to … Continue reading Colorado GOP Wants Inquiry into Delayed Notification of Data Breach

Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security

From a press release from the NYS Attorney General’s Office today: New York Attorney General Letitia James today secured $350,000 from a Long Island-based home health care company, Personal Touch Holding Corporation (Personal Touch), for failing … Continue reading Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security