Connecticut Attorney General William Tong issued a public warning following the FinalSite ransomware attack that disrupted school websites and communication systems nationwide. He urged all businesses and government entities to strengthen their data security practices and provided a detailed list of preventive measures. The AG also announced a new online form to help businesses comply with breach notification obligations for Connecticut residents.
In-house legal teams should review all vendor agreements with FinalSite and similar educational technology service providers, focusing on data security and incident response clauses. Specifically examine the data security addendum, breach notification procedures (including timelines and content), incident response plan requirements, data encryption standards, audit rights for security assessments, indemnification provisions for cyber incidents, service level agreements regarding system availability and uptime, data retention and deletion policies, subprocessor oversight mechanisms, and cyber insurance requirements. Given the ransomware attack's impact on school operations, contracts may need amendments to mandate specific preventive controls (e.g., multi-factor authentication, regular penetration testing), clarify notification obligations under Connecticut law, require prompt reporting of ransomware events, and ensure adequate business continuity and disaster recovery provisions.
Entity
FinalSite
Industry
TechnologyConnecticut Attorney General William Tong joined a coalition of states and local governments in filing suit against NHTSA over its rule weakening fuel economy standards for new passenger cars and light trucks. The lawsuit alleges the rule violates the agency’s statutory mandate and the Administrative Procedure Act; no penalty or final remedy is reported.
Connecticut Attorney General William Tong joined a multistate coalition suing the EPA over its repeal of greenhouse gas pollution limits for power plants and separately filed a notice of intent to sue over regulation of existing gas plants. The coalition asks the court to overturn the repeal and restore the protections; the release reports no monetary penalty or final order.
$400.0M
Connecticut Attorney General William Tong announced a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. resolving allegations that the generic drug manufacturers conspired to inflate prices, limit competition, and restrain trade. The settlement includes consumer restitution and injunctive reforms; court approval was being sought.
Connecticut Attorney General William Tong joined a coalition of 21 attorneys general in submitting a comment letter opposing a DHS rule that allows certain affirmative asylum applications to be referred to removal proceedings without an asylum officer interview. The coalition argues the rule violates federal law and harms asylum seekers, including unaccompanied children; this was a policy opposition letter, not a privacy enforcement action.
Connecticut and Massachusetts co-led a coalition protest urging FERC to reject the proposed NextEra Energy-Dominion Energy merger. The coalition argued that the merger could increase market power and threaten energy affordability, reliability, and competition; the release does not report a final enforcement decision or penalty.
Connecticut officials warned residents about potential home improvement scams before an approaching nor’easter, including unlicensed contractors, high-pressure sales tactics, and demands for full payment upfront. The release provides consumer guidance on checking contractors and contract requirements; it does not announce an enforcement action or penalty against a named entity.