GRC Report Staff

Healthplex to Pay $2 Million in Cybersecurity Settlement Over Phishing Breach That Exposed Tens of Thousands of New Yorkers’ Data

The New York State Department of Financial Services (DFS) has reached a $2 million settlement with Healthplex after finding the dental insurance management company violated the state’s cybersecurity regulation, enabling a late-2021 phishing attack that compromised sensitive personal and health information for tens of thousands of consumers.

ASIC Sues Mercer Super Over Alleged Systemic Failures in Reporting Member Services Investigations

Mercer Super, one of Australia’s largest superannuation funds, is facing fresh legal trouble after the corporate regulator accused it of a pattern of systemic failures, the kind that can quietly erode trust in a sector meant to safeguard Australians’ retirement savings.

South Korea’s Privacy Regulator Steps In to Bring Order to the Generative AI Wild West

Generative AI may be the tech world’s shiny new engine, but as it powers everything from government chatbots to healthcare diagnostics, it has become appararent that these models eat data for breakfast, and a lot of that data is personal. On August 6, 2025, South Korea’s Personal Information Protection Commission (PIPC) decided it was time to lay down the law, or at least a roadmap, by releasing its first Guidelines on Personal Data Processing for Generative AI.

EPA Restores Guidance Portal to Aid Regulated Entities & Strengthen Transparency

The U.S. Environmental Protection Agency (EPA) has reopened its online Guidance Portal, reviving a Trump-era transparency tool that had been taken offline during the Biden-Harris Administration. Announced on August 13, the relaunched site serves as a centralized hub for guidance documents across the agency’s environmental programs, covering areas such as air quality, water protection, and hazardous waste management.

New York Sues Zelle’s Operator After CFPB Drops Similar Case in March

Zelle promised speed, convenience, and the comforting seal of “backed by the banks.” For many users, it delivered something else entirely, a direct pipeline for scammers to siphon away hard-earned money, with little hope of getting it back.

National Australia Bank Ordered to Pay $15.5 Million for Leaving Struggling Customers in Limbo

A Federal Court in Australia has recently ordered National Australia Bank (NAB) and its subsidiary, AFSH Nominees Pty Ltd (AFSH), to pay a combined $15.5 million in penalties after failing to meet legal obligations to customers facing financial hardship.

Liberty Mutual Pays $4.7 Million in First Bribery Resolution Since Trump’s FCPA Rollback

Liberty Mutual has agreed to pay back $4.7 million in profits to the U.S. government to settle a Foreign Corrupt Practices Act case involving bribes in India, a resolution that’s as much about politics and policy shifts in Washington as it is about corporate compliance in Mumbai.