US State

Stratus Financial LLC Consent Order for Consumer Loan Act Violations

The Washington State Department of Financial Institutions issued a consent order against Stratus Financial LLC for violations of the Consumer Loan Act. Stratus Financial must pay an investigation fee, waive all interest and fees on student loans to Washington residents, and comply with record retention requirements.

DFI v. La Comercial Food Store LLC - Check Casher License Revocation

The Washington State Department of Financial Institutions (DFI) has issued a Statement of Charges against La Comercial Food Store LLC, proposing to revoke its check casher license. The allegations include failure to comply with DFI directives, provide financial statements, maintain proper records, and issue customer receipts.

New Venture Escrow, Inc. - Cease and Desist Order and Fine

The Washington Department of Financial Institutions (DFI) has issued a Statement of Charges and Notice of Intent to Enter an Order to Cease and Desist against New Venture Escrow, Inc. The company faces a $38,000 fine for alleged unlicensed activity and failure to maintain records in Washington State.

Bay-Valley Mortgage Group Ordered to Cease and Desist Business

The Washington Department of Financial Institutions has issued a Final Order requiring Bay-Valley Mortgage Group, Inc. to permanently cease and desist from conducting business in the state. The order also mandates the company to cease all new business and foreclosure actions in Washington and provide requested records.

Metropolitan Capital Bank & Trust - FDIC Appointed Receiver

The Illinois Department of Financial and Professional Regulation has found Metropolitan Capital Bank & Trust to be operating in an unsafe and unsound manner. The agency has taken possession of the bank and appointed the FDIC as receiver, effective January 30, 2026.

Cybersecurity Alert: Cisco Zero-Day Vulnerabilities

The New York State Department of Financial Services issued a cybersecurity alert regarding active exploitation of Cisco zero-day vulnerabilities. Regulated entities are required to immediately identify affected Cisco devices and follow remediation steps outlined by CISA, including potential disconnection of end-of-support hardware.

NY DFS Guidance on Virtual Currency Custody and Customer Protection

The New York State Department of Financial Services has issued updated guidance on virtual currency custody and customer protection, replacing its 2023 guidance. The updated guidance provides further direction on sub-custody arrangements and emphasizes sound custody and disclosure practices to protect customers in the event of insolvency.

Guidance on Managing Third-Party Cybersecurity Risks

The New York State Department of Financial Services issued guidance on managing cybersecurity risks associated with third-party service providers. The guidance clarifies existing requirements and recommends best practices for covered entities to strengthen their oversight of these providers.

DFS Alert: Phishing Scam Targeting Regulated Entities

The New York Department of Financial Services (DFS) issued an alert regarding a phishing scam targeting regulated entities. The notice advises entities to exercise caution with unexpected communications and verify legitimacy before taking action.

Cybersecurity Advisory on Targeted Vishing Attacks

The New York State Department of Financial Services (DFS) issued a cybersecurity advisory highlighting an increase in targeted vishing attacks. Regulated entities are urged to review their cybersecurity programs and implement enhanced measures to protect against credential theft and unauthorized access.