Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security

From a press release from the NYS Attorney General’s Office today: New York Attorney General Letitia James today secured $350,000 from a Long Island-based home health care company, Personal Touch Holding Corporation (Personal Touch), for failing … Continue reading Personal Touch Holding settles NY Attorney General’s lawsuit stemming from 2021 ransomware incident: will pay $350k, improve security

Inmediata settles multi-state litigation for $1.14 million; will improve data security and breach notification practices

Indiana Attorney General Rokita led a coalition of 33 attorneys general in a multi-state investigation and litigation against health care clearinghouse Imnediata stemming from a breach disclosed in 2019. Background In January 2019, HHS OCR alerted Inme… Continue reading Inmediata settles multi-state litigation for $1.14 million; will improve data security and breach notification practices

Pennycuick Measure Providing Free Credit Monitoring for Data Breach Victims Approved by Pennsylvania Senate

Pennsylvania Senate Republicans write: The state Senate today approved bipartisan legislation sponsored by Sen. Tracy Pennycuick (R-24) to strengthen notification requirements for data breaches and provide affected citizens with free credit monitoring … Continue reading Pennycuick Measure Providing Free Credit Monitoring for Data Breach Victims Approved by Pennsylvania Senate

Indiana attorney general sues provider over violation of consumer protection, privacy laws

Abigail Ruhman reports: Indiana Attorney General Todd Rokita is suing a northwest Indiana medical office over a ransomware event that put personal and protected health information at risk. The lawsuit alleges the provider was aware of security concerns… Continue reading Indiana attorney general sues provider over violation of consumer protection, privacy laws

Broomfield Skilled Nursing and Rehabilitation Center settles breach-related charges with Colorado Attorney General

Colorado Attorney General Phil Weiser recently announced a settlement with Broomfield Skilled Nursing and Rehabilitation Center, LLC stemming from a 2021 data breach. The following is the state’s press release: Sept. 22, 2023 (DENVER) – Attorney … Continue reading Broomfield Skilled Nursing and Rehabilitation Center settles breach-related charges with Colorado Attorney General

Attorney General James Reaches Agreement with Marymount Manhattan College to Invest $3.5 Million to Protect Students’ Online Data

NEW YORK – New York Attorney General Letitia James today announced an agreement with Marymount Manhattan College (MMC), a private non-profit liberal arts college in New York City, to invest $3.5 million in data security to protect students’ online data… Continue reading Attorney General James Reaches Agreement with Marymount Manhattan College to Invest $3.5 Million to Protect Students’ Online Data

NYC schools are tightening cybersecurity. Some educators fear unintended consequences.

Michael Elsen-Rooney reports: Following two high-profile data breaches, New York City’s Education Department has moved to shore up its cybersecurity protocols, increasing its vetting of software vendors and tightening email access for schools and paren… Continue reading NYC schools are tightening cybersecurity. Some educators fear unintended consequences.

California Privacy Protection Agency publishes new draft regulations addressing AI, risk assessments, cyber audits

Philip N. Yannella, Gregory P. Szewczyk, and Timothy Dickens of Ballard Spahr write: The California Privacy Protection Agency (CPPA) recently published two new sets of draft regulations addressing a range of cutting-edge data protection issues.  Althou… Continue reading California Privacy Protection Agency publishes new draft regulations addressing AI, risk assessments, cyber audits

NYS Comptroller Audit: Cyber Incident Response Team (Follow-Up)

Issued Date: July 20, 2023 Agency/Authority:  Homeland Security and Emergency Services, Division of Objective To assess the extent of implementation of the two recommendations included in our initial audit report, Cyber Incident Response Team (Report 2… Continue reading NYS Comptroller Audit: Cyber Incident Response Team (Follow-Up)

Governor Hochul Announces Nation-Leading Cybersecurity Strategy

Backed by $600 Million Commitment to Bolster Cybersecurity for All New Yorkers Representatives from the White House, Critical Infrastructure, and the Private Sector Joined Governor Hochul for Announcement Advances Governor’s State of the State Priority… Continue reading Governor Hochul Announces Nation-Leading Cybersecurity Strategy