Skip to Primary Navigation

Cybersecurity shortcomings lead to fine for money service business

Montage with the NYDFS logo and the skyline of the westside of Manhattan at sunrise, with reflections seen in the Hudson River.
GRIP Montage: NYDFS/Getty Images

A NYDFS investigation following a ransomware attack uncovered an inadequate cybersecurity risk assessment.

Order Express is a money service business providing financial services that include money transfers, check cashing and money orders.

The business was subject to a successful cyberattack in 2022, which led to the encryption by ransomware of “just over half of its servers.” The attack was reported in a timely

During

Get full access, free for a month

This is a Premium article. Start your 28-day free trial to continue reading and access all content on GRIP – no payment details required.

What’s included:

  • Every new article, plus our 5,000+ archive
  • Daily regulatory insight and guidance
  • Exclusive interviews and in-depth analysis
  • Coverage of industry-leading events and conferences
  • All podcasts and videos, featuring industry experts
  • The full set of Rules Navigator tools
  • An ad-free experience