Colorado Mobile Home Park to Pay $25,000 for Data Breach

Robinson+Cole Data Privacy + Security Insider
Contact

Last week, Impact MHC, a Colorado-based mobile home park management company, agreed to pay $25,000 to the Colorado Attorney General’s office and implement new security measures after a data breach of more than 15,000 individuals’ personal information, including 719 Colorado residents. If Impact fails to implement such security measures (such as creating a written information disposal policy, a comprehensive cybersecurity program, and an incident response plan) within the allotted timeframe, it must pay an additional $30,000.

In October 2018, Impact discovered that hackers had used a phishing campaign to access its employees’ email accounts, which contained personal information of customers and employees, including Social Security numbers and financial information. The hackers had access to the account until July 2019. After discovery of this incident, Impact did not notify the affected Colorado residents for over 10 months. Colorado state data breach notification law requires notice of a breach within 30 days of discovery.

Attorney General Philip Weiser said, “Now more than ever companies must remain vigilant in the digital world. A data breach like the one at Impact MHC can put important consumer financial and personal information in the hands of the wrong people and cause significant harm to Coloradans and their families, as we have seen recently with regard to the unemployment insurance fraud that has led to over one million fraudulent claims. We will continue to hold companies accountable for safeguarding residents’ data.”

[View source.]

DISCLAIMER: Because of the generality of this update, the information provided herein may not be applicable in all situations and should not be acted upon without specific legal advice based on particular situations. Attorney Advertising.

© Robinson+Cole Data Privacy + Security Insider

Written by:

Robinson+Cole Data Privacy + Security Insider
Contact
more
less

PUBLISH YOUR CONTENT ON JD SUPRA NOW

  • Increased visibility
  • Actionable analytics
  • Ongoing guidance

Robinson+Cole Data Privacy + Security Insider on:

Reporters on Deadline

"My best business intelligence, in one easy email…"

Your first step to building a free, personalized, morning email brief covering pertinent authors and topics on JD Supra:
*By using the service, you signify your acceptance of JD Supra's Privacy Policy.
Custom Email Digest
- hide
- hide