Massachusetts AG Secures 795K Data Breach Settlement
p3ppppFind Your Next Job pp
ppOn August 19 Massachusetts Attorney General Andrea Joy Campbell announced a 795000 settlement with a property management company for alleged violations of the Massachusetts Consumer Protection Act and the Massachusetts Data Security Law and Data Security Regulations The AG alleged that the company failed to maintain reasonable data security practices and delayed required notifications to both regulators and consumers following multiple cybersecurity breachesppAccording to the press release the company manages hundreds of residential properties across Massachusetts and experienced five separate breaches between November 2019 and September 2021 Hackers accessed sensitive consumer personal information including Social Security numbers drivers license numbers and bank account data through phishing emails Nearly 14000 notice letters were ultimately sent to affected consumers but two of the five breaches allegedly went unreported for almost seven monthsppThe consent judgement imposes the following requirementsppPutting It Into Practice Massachusetts remains highly active in consumer protection enforcement and legislative initiatives previously discussed here and here Property managers financial institutions and other businesses handling personal information should review existing safeguards against phishing and similar attacks confirm that breach notification procedures meet state requirements and ensure that monitoring and vulnerability management programs are currentpp
ppMore Upcoming Eventspp ppSign Up for any or all of our 25 Newsletterspp ppYou are responsible for reading understanding and agreeing to the National Law Reviews NLRs and the National Law Forum LLCs Terms of Use and Privacy Policy before using the National Law Review website The National Law Review is a freetouse nologin database of legal and business articles The content and links on wwwNatLawReviewcom are intended for general information purposes only Any legal analysis legislative updates or other content and links should not be construed as legal or professional advice or a substitute for such advice No attorneyclient or confidential relationship is formed by the transmission of information between you and the National Law Review website or any of the law firms attorneys or other professionals or organizations who include content on the National Law Review website If you require legal or professional advice kindly contact an attorney or other suitable professional advisor ppSome states have laws and ethical rules regarding solicitation and advertisement practices by attorneys andor other professionals The National Law Review is not a law firm nor is wwwNatLawReviewcom intended to be a referral service for attorneys andor other professionals The NLR does not wish nor does it intend to solicit the business of anyone or to refer anyone to an attorney or other professional NLR does not answer legal questions nor will we refer you to an attorney or other professional if you request such information from us ppUnder certain state laws the following statements may be required on this website and we have included them in order to be in full compliance with these rules The choice of a lawyer or other professional is an important decision and should not be based solely upon advertisements Attorney Advertising Notice Prior results do not guarantee a similar outcome Statement in compliance with Texas Rules of Professional Conduct Unless otherwise noted attorneys are not certified by the Texas Board of Legal Specialization nor can NLR attest to the accuracy of any notation of Legal Specialization or other Professional CredentialsppThe National Law Review National Law Forum LLC 2070 Green Bay Rd Suite 178 Highland Park IL 60035 Telephone 708 3573317 or tollfree 877 3573317 If you would like to contact us via email please click hereppCopyright 2025 National Law Forum LLCp
ppOn August 19 Massachusetts Attorney General Andrea Joy Campbell announced a 795000 settlement with a property management company for alleged violations of the Massachusetts Consumer Protection Act and the Massachusetts Data Security Law and Data Security Regulations The AG alleged that the company failed to maintain reasonable data security practices and delayed required notifications to both regulators and consumers following multiple cybersecurity breachesppAccording to the press release the company manages hundreds of residential properties across Massachusetts and experienced five separate breaches between November 2019 and September 2021 Hackers accessed sensitive consumer personal information including Social Security numbers drivers license numbers and bank account data through phishing emails Nearly 14000 notice letters were ultimately sent to affected consumers but two of the five breaches allegedly went unreported for almost seven monthsppThe consent judgement imposes the following requirementsppPutting It Into Practice Massachusetts remains highly active in consumer protection enforcement and legislative initiatives previously discussed here and here Property managers financial institutions and other businesses handling personal information should review existing safeguards against phishing and similar attacks confirm that breach notification procedures meet state requirements and ensure that monitoring and vulnerability management programs are currentpp
ppMore Upcoming Eventspp ppSign Up for any or all of our 25 Newsletterspp ppYou are responsible for reading understanding and agreeing to the National Law Reviews NLRs and the National Law Forum LLCs Terms of Use and Privacy Policy before using the National Law Review website The National Law Review is a freetouse nologin database of legal and business articles The content and links on wwwNatLawReviewcom are intended for general information purposes only Any legal analysis legislative updates or other content and links should not be construed as legal or professional advice or a substitute for such advice No attorneyclient or confidential relationship is formed by the transmission of information between you and the National Law Review website or any of the law firms attorneys or other professionals or organizations who include content on the National Law Review website If you require legal or professional advice kindly contact an attorney or other suitable professional advisor ppSome states have laws and ethical rules regarding solicitation and advertisement practices by attorneys andor other professionals The National Law Review is not a law firm nor is wwwNatLawReviewcom intended to be a referral service for attorneys andor other professionals The NLR does not wish nor does it intend to solicit the business of anyone or to refer anyone to an attorney or other professional NLR does not answer legal questions nor will we refer you to an attorney or other professional if you request such information from us ppUnder certain state laws the following statements may be required on this website and we have included them in order to be in full compliance with these rules The choice of a lawyer or other professional is an important decision and should not be based solely upon advertisements Attorney Advertising Notice Prior results do not guarantee a similar outcome Statement in compliance with Texas Rules of Professional Conduct Unless otherwise noted attorneys are not certified by the Texas Board of Legal Specialization nor can NLR attest to the accuracy of any notation of Legal Specialization or other Professional CredentialsppThe National Law Review National Law Forum LLC 2070 Green Bay Rd Suite 178 Highland Park IL 60035 Telephone 708 3573317 or tollfree 877 3573317 If you would like to contact us via email please click hereppCopyright 2025 National Law Forum LLCp
