New York audits & alerts
Industry audit summaries and breach trackers linked from the New York regulator resource matrix. View all news → · All industries → · Regulator resources →
Independent audits of major New York banks reveal a wide range of cybersecurity results. Banks are bound by the GLBA Safeguards Rule, FFIEC guidance, and NYDFS 23 NYCRR 500, and weak email authentication is a direct path to business email compromise and wire fraud. Also MFA-graded 11 New York banks (7 Fail under SIM-swap rule): YubiKey, open TOTP, and passkeys.
Read Update
Independent audits of New York state and metro chambers reveal email security gaps — scores run from 70% down to 44%, with 2 of 6 below 60%. Use these benchmarks as a free member-benefit resource.
Read Update
Independent audits of major New York hospitals and healthcare systems reveal significant cybersecurity gaps — scores run from 70% down to 44%, with 2 of 6 below 60%. the HIPAA Security Rule makes authenticated email critical.
Read Update
Independent audits of major New York real estate brokerages reveal significant cybersecurity gaps — scores run from 68% down to 30%, with 4 of 6 below 60%. wire-fraud and business email compromise prevention makes authenticated email critical.
Read Update
Independent audits of major New York school districts and local government reveal significant cybersecurity gaps — scores run from 71% down to 50%, with 3 of 5 below 60%. state cybersecurity training and coordinator requirements makes authenticated email critical.
Read Update
Independent audits of major New York accounting firms reveal a wide range of cybersecurity results. The IRS (Publication 4557) requires every tax professional to maintain a written information security plan (WISP) to keep a PTIN, and the FTC Safeguards Rule backs it with civil penalties.
Read Update
Independent audits of major New York auto dealerships reveal a wide range of cybersecurity results. Auto dealers are classified as financial institutions under the FTC Safeguards Rule (16 CFR Part 314) and must maintain a documented information security program.
Read Update
Independent audits of major New York credit unions reveal a wide range of cybersecurity results. GLBA and the FTC Safeguards Rule require documented safeguards for members' nonpublic personal information. Also MFA-graded 13 New York credit unions (13 Fail under SIM-swap rule): YubiKey, open TOTP, and passkeys.
Read Update
Independent audits of major New York dental groups reveal a wide range of cybersecurity results. The HIPAA Security Rule requires every practice to perform and document a security risk analysis and safeguard ePHI in transit.
Read Update
Independent audits of major New York title companies reveal a wide range of cybersecurity results. Wire-transfer fraud almost always starts with a spoofed or look-alike email.
Read Update
Independent audits show significant variation in email security among New York’s leading law firms. Paul Weiss and Wachtell Lipton lead with strong scores, while several elite firms score below 55%.
Read Update