Chegg avoids fine in deal with FTC over cybersecurity lapses
By 
Aaron Nicodemus2022-10-31T17:25:00
The Federal Trade Commission (FTC) ordered education technology provider Chegg to fix problems and weaknesses with its cybersecurity program that led to the exposure of personal and financial data of 40 million customers in four data breaches since 2017.
In agreeing to the order, Chegg promised to “bolster its data security, limit the data the company can collect and retain, offer users multifactor authentication to secure their accounts, and allow users to access and delete their data,” the FTC said Monday in a press release.
Chegg neither admitted nor denied any of the allegations in the FTC complaint, except as specifically stated in the decision, according to the FTC’s order.
Related articles
-
ArticleNYDFS to firms: apply cybersecurity rules to third-parties
The New York State Department of Financial Services (NYDFS) wants financial firms to step up their game when it comes to third parties and cybersecurity.
-
ArticleExtra-territorial rules: How to navigate global compliance complexity
Sanctions, tariffs, economic crime, big tech, data privacy, and environmental laws are expanding global compliance risks. Tougher penalties now reach deep into supply chains, making even small suppliers accountable to customers or regulators.
-
ArticleNY auto insurers on the hook for $19M for cybersecurity violations
Eight auto insurers failed to meet the requirements of New York’s cybersecurity regulations during widespread online attacks in 2021 and will pay $19 million under consent orders with the New York State Department of Financial Services (NYDFS).
More from Regulatory Enforcement
-
News BriefCanada to launch new federal office targeting financial crime and fraud
Canada is creating a new federal office to lead efforts against financial crime. The initiative marks the government’s most significant move yet to modernize its approach to fraud and money laundering.
-
News BriefSmartmatic faces DOJ charges amid allegations of election contract bribes
Three executives of a multinational voting machine company in the crosshairs of President Donald Trump since 2020 have been indicted in Florida by the U.S. Department of Justice for allegedly paying $1 million in bribes to the Philippines top election official.
-
PremiumSoaring costs of car loan compensation in U.K. highlight global risks from poor sales practices
U.K. motor finance companies are preparing to pay billions in compensation after a Supreme Court ruling found they sold unfair car loans over many years, failing to disclose key information and denying consumers the chance to compare deals or negotiate.