79 articles · page 2 of 2
Rhode Island requires data breach notification within 45 days (30 for government). Learn about the 128-bit encryption safe harbor, AG reporting at 500+, and per-record penalties.
Serviceaide's $1.8M claim window closed September 1, 2026. A final approval hearing is set for September 16, 2026; the court and Kroll post status updates.
South Carolina requires data breach notification without unreasonable delay under S.C. Code 39-1-90. Learn about the private right of action, $1,000 per-resident fines, and CRA reporting at 1,000+.
South Dakota requires data breach notification within 60 days. Learn about the AG reporting threshold of 250 residents, $10,000/day penalties, and protected information coverage.
The $2.95M STIIIZY data breach settlement is open. Claims are due September 10, 2026. See who is covered and what a realistic payout looks like.
T-Mobile's $350M breach settlement mostly paid out by May 2025, but a second residual distribution from leftover funds is still pending in 2026.
Tennessee requires data breach notification within 45 days under Tenn. Code 47-18-2107. Learn about the private right of action, FIPS 140-2 encryption safe harbor, and CRA reporting at 1,000+.
Texas requires breach notification within 60 days to individuals and 30 days to the AG. Penalties reach $50,000 per violation under the DTPA.
The Thompson Coburn LLP breach settlement closed claims July 23, 2026 and is awaiting a ruling after its August 27, 2026 hearing. No payout date is set.
As of September 2026, there is no Ticketmaster data breach settlement, fund, or claim form. The MDL is in active motion practice with no class certified.
The Union Bank and Trust MOVEit settlement closed claims July 21, 2026 and awaits a ruling after its August 6, 2026 hearing. See who was eligible and what is next.
Utah requires data breach notification without unreasonable delay. Learn about the 2024 AG/Cyber Center reporting requirement at 500+, $2,500 per-consumer penalties, and investigation obligation.
Vermont requires data breach notification within 45 days plus a 14-day preliminary AG notice. Learn who must comply, protected data types, penalties, and reporting rules.
Virginia requires data breach notification to the Attorney General and affected residents without unreasonable delay. Learn about the $150,000 penalty cap and private right of action for direct economic damages.
Washington requires data breach notification within 30 days and has one of the broadest PI definitions in the U.S. Learn reporting rules, AG notification, and private right of action.
West Virginia requires data breach notification without unreasonable delay. Learn its narrow PI definition, no AG reporting requirement, encryption safe harbor, and $150K penalty cap.
Got a data breach letter? Verify it's real, freeze your credit free at all three bureaus, then enable free monitoring, in that order, before anything else.
Wisconsin requires data breach notification within 45 days. Learn its PI definition covering biometric data and DNA, no AG reporting requirement, and $10,000 per violation penalty.
Wyoming requires data breach notification without unreasonable delay for private sector entities. Learn its broad PI definition including biometric data, enforcement rules, and safe harbors.