California audits & alerts
Industry audit summaries and breach trackers linked from the California regulator resource matrix. View all news → · All industries → · Regulator resources →
Independent audits of major California banks reveal a wide range of cybersecurity results. Banks are bound by the GLBA Safeguards Rule and FFIEC guidance, and weak email authentication is a direct path to business email compromise and wire fraud. Also MFA-graded 12 California banks (11 Fail under SIM-swap rule): YubiKey, open TOTP, and passkeys.
Read Update
Independent audits of California state and metro chambers reveal email security gaps — scores run from 54% down to 50%, with 7 of 7 below 60%. Use these benchmarks as a free member-benefit resource.
Read Update
Independent audits of major California hospitals and healthcare systems reveal significant cybersecurity gaps — scores run from 74% down to 60%, with 0 of 6 below 60%. the HIPAA Security Rule makes authenticated email critical.
Read Update
Independent audits of major California real estate brokerages reveal significant cybersecurity gaps — scores run from 64% down to 44%, with 4 of 6 below 60%. wire-fraud and business email compromise prevention makes authenticated email critical.
Read Update
Independent audits of major California school districts and local government reveal significant cybersecurity gaps — scores run from 70% down to 48%, with 3 of 7 below 60%. state cybersecurity training and coordinator requirements makes authenticated email critical.
Read Update
Independent audits of major California accounting firms reveal a wide range of cybersecurity results. The IRS (Publication 4557) requires every tax professional to maintain a written information security plan (WISP) to keep a PTIN, and the FTC Safeguards Rule backs it with civil penalties.
Read Update
Independent audits of major California auto dealerships reveal a wide range of cybersecurity results. Auto dealers are classified as financial institutions under the FTC Safeguards Rule (16 CFR Part 314) and must maintain a documented information security program.
Read Update
Independent audits of major California credit unions reveal a wide range of cybersecurity results. GLBA and the FTC Safeguards Rule require documented safeguards for members' nonpublic personal information. Also MFA-graded 12 California credit unions (12 Fail under SIM-swap rule): YubiKey, open TOTP, and passkeys.
Read Update
Independent audits of major California dental groups reveal a wide range of cybersecurity results. The HIPAA Security Rule requires every practice to perform and document a security risk analysis and safeguard ePHI in transit.
Read Update
Independent audits of major California title companies reveal a wide range of cybersecurity results. Wire-transfer fraud almost always starts with a spoofed or look-alike email.
Read Update
Independent audits reveal significant variation in email security among California’s leading law firms. O’Melveny leads with 73%, while several prestigious firms score below 50%.
Read Update
The State Bar of California has issued a fraud alert highlighting identity theft, trust account scams, wire fraud, and phishing schemes targeting attorneys. These threats are national in scope and directly relevant to Texas law firms.
Read Update