2026-05-07: NYDFS imposed a $2.25 million penalty on Delta Dental for MOVEit breach failures including late

Show Notes - 2026-05-07 Stories Covered: - May 7, 2026 - Today: - NYDFS Delta Dental $2.25M Penalty (MOVEit Breach) (https://www.debevoisedatablog.com/2026/05/06/nydfss-first-2026-cyber-enforcement-action-highlights-imperative-of-early-notification-robust-ir-plans-and-data-minimization/) - Blue Cross Blue Shield $2.67B Antitrust Settlement Payments Begin (https://topclassactions.com/lawsuit-settlements/lawsuit-news/blue-cross-blue-shield-2-67b-class-action-settlement-payments-set-to-begin/) - Oglethorpe $350K Data Breach Settlement (https://topclassactions.com/lawsuit-settlements/open-lawsuit-settlements/350k-oglethorpe-data-breach-class-action-settlement/) - Sportsman's Warehouse Pennsylvania Privacy Settlement (https://topclassactions.com/lawsuit-settlements/open-lawsuit-settlements/sportsmans-warehouse-data-privacy-class-action-settlement/) - Equity Residential $56M RealPage Rent Price-Fixing Settlement (https://topclassactions.com/lawsuit-settlements/lawsuit-news/equity-residential-to-pay-56m-to-settle-realpage-rent-price-fixing-class-action/) - Supreme Court Denies Apple Stay in Epic Games Contempt Case (https://www.scotusblog.com/2026/05/court-tuns-down-apples-request-to-pause-order-holding-it-in-contempt/) - Matt Taibbi Defamation Suit Dismissed (https://www.techdirt.com/2026/05/06/matt-taibbi-loses-his-vexatious-slapp-suit-as-judge-explains-what-a-metaphor-means/) - CISA Critical Infrastructure Isolation Initiative (CI Fortify) (https://therecord.media/cisa-initiative-aims-for-critical-infrastructure-to-operate-during-cyberattacks) - Palo Alto Networks Critical Firewall Vulnerability (CVE-2026-0300) (https://therecord.media/palo-alto-warns-of-critical-software-bug-firewalls) - FCC Laboratory Testing Ban (China-Based Facilities) (https://www.techdirt.com/2026/05/06/this-trump-fcc-cybersecurity-fix-is-about-to-make-hardware-way-more-expensive-for-everyone/) - Federal SECURE Data Act Proposed (House Republicans) (https://www.eff.org/deeplinks/2026/05/secure-data-act-not-serious-piece-privacy-legislation) - HUD Proposed AI Tool Using Sensitive Data (https://epic.org/epic-cdt-urge-hud-to-abandon-proposed-ai-tool-that-would-use-sensitive-data/) - California AI Chatbot Mental Health Liability Law (https://www.techdirt.com/2026/05/06/more-liability-will-make-ai-chatbots-worse-at-preventing-suicide/) - Illinois Chatbot Provider Liability Framework (H.B. 5044) (https://epic.org/epic-urges-support-for-chatbot-provider-liability-framework-in-illinois/) - Supreme Court Voting Rights Act Decision (Louisiana v. Callais) (https://www.scotusblog.com/2026/05/understanding-the-recent-voting-rights-act-case/) - South Dakota Citizenship Proof Voting Law (https://www.techdirt.com/2026/05/06/voter-suppression-in-south-dakota-is-well-underway-even-without-scotuss-help/) CVEs Referenced: CVE-2026-0300 Full brief: https://carolinacleartech.com/brief/2026-05-07/