Skip to content
770-587-4595
Action required California DFPI CA Aug 24, 2026

Proposed CA DFPI Regulation on Cybersecurity Failures

On August 21, 2026, California DFPI ordered a mortgage company to pay $825,000 due to cybersecurity failures leading up to a ransomware attack.

On August 21, 2026, California DFPI ordered a mortgage company to pay $825,000 due to cybersecurity failures leading up to a ransomware attack.

What changed

The order cites violations of the GLBA Safeguards Rule, particularly regarding governance and access control.

Compliance perspective

Mortgage companies should assess their cybersecurity measures and compliance with the GLBA to avoid similar penalties.

Need help keeping up with these changes?

Tell us where you operate and what licenses you hold; we'll handle the filings and renewals so changes like this do not catch you off guard.

Keep reading

More regulatory updates

Other recent rule changes our team is tracking.

  • Watch FTC Aug 24, 2026

    FTC Proposed Settlement Over Misleading Bill Payment Advertisements

    On August 21, 2026, the FTC proposed a $2. 1 million settlement concerning misleading advertisements related to bill payment services.

    Read explainer
  • Watch U.S. Department of Treasury Aug 24, 2026

    Treasury Payment Stablecoin Issuance NPRM

    On August 21, 2026, the Treasury proposed a rule defining key terms and prohibitions for payment stablecoin issuance under the GENIUS Act.

    Read explainer
  • Watch Illinois Government IL Aug 24, 2026

    Organizational Changes Under Illinois Disparate Impact Legislation

    Illinois enacted the Civil Rights Safeguard Act, expanding disparate-impact liability to lending and credit decisions effective January 1, 2027.

    Read explainer