August 1, 2021

Volume XI, Number 213

Advertisement

July 30, 2021

Subscribe to Latest Legal News and Analysis

July 29, 2021

Subscribe to Latest Legal News and Analysis

Colorado Mobile Home Park to Pay $25,000 for Data Breach

Last week, Impact MHC, a Colorado-based mobile home park management company, agreed to pay $25,000 to the Colorado Attorney General’s office and implement new security measures after a data breach of more than 15,000 individuals’ personal information, including 719 Colorado residents. If Impact fails to implement such security measures (such as creating a written information disposal policy, a comprehensive cybersecurity program, and an incident response plan) within the allotted timeframe, it must pay an additional $30,000.

In October 2018, Impact discovered that hackers had used a phishing campaign to access its employees’ email accounts, which contained personal information of customers and employees, including Social Security numbers and financial information. The hackers had access to the account until July 2019. After discovery of this incident, Impact did not notify the affected Colorado residents for over 10 months. Colorado state data breach notification law requires notice of a breach within 30 days of discovery.

Attorney General Philip Weiser said, “Now more than ever companies must remain vigilant in the digital world. A data breach like the one at Impact MHC can put important consumer financial and personal information in the hands of the wrong people and cause significant harm to Coloradans and their families, as we have seen recently with regard to the unemployment insurance fraud that has led to over one million fraudulent claims. We will continue to hold companies accountable for safeguarding residents’ data.”

Copyright © 2021 Robinson & Cole LLP. All rights reserved.National Law Review, Volume XI, Number 175
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement
Advertisement

About this Author

Kathryn Rattigan Attorney Cybersecurity Data Privacy
Associate

Kathryn Rattigan is a member of the firm's Business Litigation Group and Data Privacy + Cybersecurity Team. She advises clients on data privacy and security, cybersecurity, and compliance with related state and federal laws. Kathryn also provides legal advice regarding the use of unmanned aerial systems (UAS, or drones) and Federal Aviation Administration (FAA) regulations. She represents clients across all industries, such as insurance, health care, education, energy, and construction.

Data Privacy and Cybersecurity Compliance

Kathryn helps clients comply...

401-709-3357
Advertisement
Advertisement