GRC Report Staff

American Express Fined $350 Million Over Decade of Money Laundering Control Failures

American Express devoted more attention to the money laundering risks of its deposit accounts than to those of its much larger credit and charge card business. Over the past decade, approximately $13 billion in suspected trade-based money laundering activity went without timely identification, evaluation and sufficient reporting, according to federal regulators.

ISSB Proposes Nature-Related Disclosure Guidance, Leaving Door Open to New Standard

The International Sustainability Standards Board has proposed new guidance on nature-related financial disclosures, but companies would not have to follow it to claim compliance with the board's sustainability reporting standards.

OCC Finalizes GENIUS Act Rules, Establishing Federal Standards for Stablecoin Issuers

The Office of the Comptroller of the Currency (OCC) finalized regulations governing payment stablecoin issuers on October 21, setting federal standards for reserves, redemption, risk management, and supervision ahead of the GENIUS Act's January 2027 effective date.

Coinbase Ireland Fined €3.25 Million After Years of Failures to Safeguard Customer Funds

At its worst in 2024, the shortfall in Coinbase Ireland's customer safeguarding account reached €5.2 million. The company was required to keep enough money in the account to cover its obligations to customers. For at least 18 months, it fell short every day.

Meta Ordered to Pay $25 Billion in New Mexico Facebook Privacy Case

A New Mexico judge has ordered Meta Platforms to pay $25 billion in civil penalties after a jury found that Facebook repeatedly misled consumers about their personal information and the company's handling of harmful content. The judgment, issued Wednesday, is among the largest financial penalties ever imposed on a U.S. corporation.

Norway Reports Record Increase in Data Breaches Linked to Deliberate Cyberattacks

Norway's data protection authority received 282 reports of personal data breaches linked to deliberate cyberattacks in the first half of 2026, up from 103 during the same period last year, as intrusions at shared technology suppliers exposed information belonging to multiple organizations.

European Commission Investigates Booking.com Over Suspected DSA Violations

The European Commission has opened a formal investigation into Booking.com over concerns that fraudulent accommodation listings, phishing scams and undisclosed paid promotions may be exposing travelers to risks the platform has failed to adequately address.