On April 30, 2026, New York DFS announced a $2.25 million cybersecurity settlement with Delta Dental Insurance Company. The action reflects DFS's continued use of enforcement to back its cybersecurity requirements.
What changed
DFS imposed a monetary settlement tied to cybersecurity oversight, reinforcing the department's enforcement posture under its cyber framework.
Compliance perspective
Although this action involved an insurer, financial services companies subject to DFS cybersecurity rules should revisit governance, controls, incident response, and certification processes. Enforcement trends matter because DFS continues to test implementation through settlements.
Key date
Effective date: April 30, 2026.
Need help keeping up with these changes?
Tell us where you operate and what licenses you hold; we'll handle the filings and renewals so changes like this do not catch you off guard.