On August 13, the California DFPI announced a consent order requiring a Utah-based mortgage company to pay $825,000 for allegedly failing to adequately protect the personal information of more than 284,000 individuals, including over 34,000 California residents. According to the consent order, a threat actor breached the company’s network in March 2023, installed malware, stole employee credentials, and used…
