New York State Department of Financial Services Issues Cybersecurity Fraud Alert

The New York State Department of Financial Services (DFS) has issued a cybersecurity fraud alert to all of its regulated entities.  The Alert describes a widespread cybercrime campaign to steal consumers’ nonpublic information (NPI) from public-facing websites that transmit or display redacted NPI.

DFS has received reports from several regulated entities of successful or attempted data theft from websites that provide instant quotes – for example, auto insurance rate quotes – using consumer NPI and displaying some redacted NPI back to the consumer.  The goal of this theft appears to be to use the stolen NPI to fraudulently apply for pandemic and unemployment benefits.

“Cyber criminals are creative and tenacious, and continue to look for new ways to exploit us during an already vulnerable time,” said Superintendent of Financial Services Linda A. Lacewell. “DFS expects the industry to protect consumer data by addressing cybersecurity risks in everything they do.”

Several incidents reported by regulated entities and information gathered by DFS’s Cyber Intelligence Unit show that this cybercrime campaign is targeting a broad range of public-facing websites.  The Alert summarizes techniques used by cybercriminals and outlines cybersecurity measures to better protect consumer data.  All DFS-regulated entities with public-facing websites that transmit or display NPI – even redacted NPI – should review the findings and recommendations set forth in the Alert. 

DFS reminds its regulated entities to immediately report to DFS theft of consumers’ NPI, pursuant to its cybersecurity regulation. 

Read the alert at DFS 

(Visited 103 times, 1 visits today)

The Government Technology & Services Coalition's Homeland Security Today (HSToday) is the premier news and information resource for the homeland security community, dedicated to elevating the discussions and insights that can support a safe and secure nation. A non-profit magazine and media platform, HSToday provides readers with the whole story, placing facts and comments in context to inform debate and drive realistic solutions to some of the nation’s most vexing security challenges.

Leave a Reply

Latest from Cybersecurity

Go to Top
X