Colorado’s Attorney General has agreed the settlement with SEMA Construction. The company’s employees stored customer personal information in their work email accounts for as long as 20 years. This included information such as social security numbers, bank account and routing numbers, and driver’s license numbers. The company discovered a phishing attack that resulted in unauthorized access to said information but didn’t notify affected individuals for two years.
The Colorado Attorney General's Office is asking for the public to provide feedback on the CPA rules and what they should look like.