NY DFS

Healthplex Inc. Consent Order with NY DFS

The New York State Department of Financial Services (DFS) issued a consent order against Healthplex, Inc. for violations of the state's Cybersecurity Regulation. Healthplex will pay a penalty and must implement corrective actions to comply with data protection and multi-factor authentication requirements.

Cybersecurity Alert: Cisco Zero-Day Vulnerabilities

The New York State Department of Financial Services issued a cybersecurity alert regarding active exploitation of Cisco zero-day vulnerabilities. Regulated entities are required to immediately identify affected Cisco devices and follow remediation steps outlined by CISA, including potential disconnection of end-of-support hardware.

NY DFS Guidance on Virtual Currency Custody and Customer Protection

The New York State Department of Financial Services has issued updated guidance on virtual currency custody and customer protection, replacing its 2023 guidance. The updated guidance provides further direction on sub-custody arrangements and emphasizes sound custody and disclosure practices to protect customers in the event of insolvency.

Guidance on Managing Third-Party Cybersecurity Risks

The New York State Department of Financial Services issued guidance on managing cybersecurity risks associated with third-party service providers. The guidance clarifies existing requirements and recommends best practices for covered entities to strengthen their oversight of these providers.

DFS Alert: Phishing Scam Targeting Regulated Entities

The New York Department of Financial Services (DFS) issued an alert regarding a phishing scam targeting regulated entities. The notice advises entities to exercise caution with unexpected communications and verify legitimacy before taking action.

Cybersecurity Advisory on Targeted Vishing Attacks

The New York State Department of Financial Services (DFS) issued a cybersecurity advisory highlighting an increase in targeted vishing attacks. Regulated entities are urged to review their cybersecurity programs and implement enhanced measures to protect against credential theft and unauthorized access.

NY DFS Circular Letter: Benefit Offset Provisions for Disability Income Policies

The New York Department of Financial Services issued a circular letter clarifying guidance on benefit offset provisions for disability income policies. The letter reiterates that offsets can only be based on government benefits actually received, not estimated eligibility, with specific allowances for optional, opt-out provisions in group and blanket policies.

Supplemental Spousal Liability Insurance Requirements Update

The New York Department of Financial Services issued Circular Letter 2 (2025) to inform insurers of amendments to Insurance Law § 3420(g) regarding Supplemental Spousal Liability (SSL) insurance. Effective March 26, 2025, the law changes how SSL insurance is offered, requiring it to be automatically included for non-commercial policies only if the applicant indicates they have a spouse, and upon specific written request for other policies.

Property/Casualty Insurers Disaster Planning and Response Guidance

The New York Department of Financial Services issued a circular letter requiring property/casualty insurers to enhance their disaster planning, preparedness, and response capabilities. This guidance outlines expected standards for various insurance entities and replaces previous circulars.

Disaster Planning Guidance for Life and Health Insurers

The New York State Department of Financial Services issued Circular Letter 4, updating guidance on disaster planning, preparedness, and response for life and health insurers. This guidance repeals and replaces previous circulars and outlines expected standards for business impact analysis and operational continuity.