Court Rules
All enforcement actions
SettlementMedium Risk

CT AG Settles Guardian Analytics Data Breach for $500K

Guardian Analytics, Inc. and Actimize, Inc.October 21, 2024Connecticut Attorney General

Penalty Amount

$500,000

Consumers Affected

157,629

Summary

Guardian Analytics, Inc. and Actimize, Inc. settled with the Connecticut Attorney General over a data breach affecting 157,629 Connecticut residents. The breach, from November 2022 to January 2023, exposed personal information due to security failures. The settlement includes a $500,000 penalty and mandatory cybersecurity improvements.

Remedy

Guardian and Actimize must pay $500,000 to the state, maintain a comprehensive information security program, encrypt all personal information, conduct annual risk assessments, implement multi-factor authentication, maintain an incident response plan, and obtain a third-party security assessment.

Monetary PenaltyCompliance ProgramAudit Requirement

Contract Impact

In-house legal teams should review vendor agreements where the entity provides data analytics or fraud prevention services to financial institutions, focusing on data security obligations, breach notification timelines, and compliance with state privacy laws. Specific clauses to examine include data security requirements, incident response procedures, audit rights, and indemnification for breaches. Given the security failures leading to exposure of sensitive financial data, contracts may need enhancements such as mandatory encryption, regular security assessments, immediate breach reporting, and clearer vendor oversight provisions.

Contract Search Terms

data security addendumincident response planbreach notification clauseencryption standardsaccess controlsthird-party risk managementaudit rightsdata processing agreementsecurity incident reportingvendor management clause

Laws Cited

Connecticut privacy and consumer protection laws

Violation Types

Entity Details

Entity

Guardian Analytics, Inc. and Actimize, Inc.

Also known as: Guardian Analytics

Industry

Technology

Official Sources

Source Evidence

Entity Name
"Guardian Analytics, Inc. (“Guardian”) and its successor Actimize, Inc. (“Actimize”)"
Fine Amount
"pay $500,000"
Laws Cited
"Connecticut’s privacy and consumer protection laws"
Violation Types
"failing to implement reasonable data security"

Related Enforcement Actions

CT

National Highway Traffic Safety Administration

Connecticut Attorney General William Tong joined a coalition of states and local governments in filing suit against NHTSA over its rule weakening fuel economy standards for new passenger cars and light trucks. The lawsuit alleges the rule violates the agency’s statutory mandate and the Administrative Procedure Act; no penalty or final remedy is reported.

CT

U.S. Environmental Protection Agency

Connecticut Attorney General William Tong joined a multistate coalition suing the EPA over its repeal of greenhouse gas pollution limits for power plants and separately filed a notice of intent to sue over regulation of existing gas plants. The coalition asks the court to overturn the repeal and restore the protections; the release reports no monetary penalty or final order.

CT

Sandoz Inc. and Fougera Pharmaceuticals Inc.

$400.0M

Connecticut Attorney General William Tong announced a $400 million settlement with Sandoz Inc. and Fougera Pharmaceuticals Inc. resolving allegations that the generic drug manufacturers conspired to inflate prices, limit competition, and restrain trade. The settlement includes consumer restitution and injunctive reforms; court approval was being sought.

CT

U.S. Department of Homeland Security

Connecticut Attorney General William Tong joined a coalition of 21 attorneys general in submitting a comment letter opposing a DHS rule that allows certain affirmative asylum applications to be referred to removal proceedings without an asylum officer interview. The coalition argues the rule violates federal law and harms asylum seekers, including unaccompanied children; this was a policy opposition letter, not a privacy enforcement action.

CT

NextEra Energy and Dominion Energy

Connecticut and Massachusetts co-led a coalition protest urging FERC to reject the proposed NextEra Energy-Dominion Energy merger. The coalition argued that the merger could increase market power and threaten energy affordability, reliability, and competition; the release does not report a final enforcement decision or penalty.

CT

Unspecified home improvement contractors

Connecticut officials warned residents about potential home improvement scams before an approaching nor’easter, including unlicensed contractors, high-pressure sales tactics, and demands for full payment upfront. The release provides consumer guidance on checking contractors and contract requirements; it does not announce an enforcement action or penalty against a named entity.