Post #4476537

New York State Department of Financial Services announced on August 5 that Order Express, Inc., a licensed money transmitter, will pay a $250,000 penalty for violations of DFS’s cybersecurity regulation (23 NYCRR Part 500). Order Express suffered a ransomware attack in 2022, which they reported appropriately. But then the DFS's investigation revealed that the entity did not have adequate cybersecurity risk assessment or plan. Read more at: https://www.dfs.ny.gov/reports_and_publications/press_releases/pr20260805 #NYSDFS #OrderExpress #databreach #cybersecurity #FinSec #ransomware #riskassessment