GRC Report Staff

Rite Aid Reports Data Breach Affecting Customers from 2017-2018

Rite Aid Corporation announced today that it has fallen victim to a cybersecurity incident, potentially exposing personal information of customers who made purchases between June 6, 2017, and July 30, 2018. The pharmacy chain, currently trading over-the-counter following its Chapter 11 bankruptcy filing last year, is in the process of notifying affected individuals.

AT&T Reports Illegal Download of Customer Data in Major Security Breach

In a significant cybersecurity incident, AT&T has recently disclosed that customer data was illegally downloaded from a third-party cloud platform workspace in April. The telecommunications giant is now working closely with law enforcement to apprehend those responsible for the breach, with at least one person already in custody.

Department of Labor & Dollar General Reach Safety Agreement to Enhance Workplace Conditions Nationwide

The U.S. Department of Labor has announced a comprehensive corporate-wide settlement with Dollar General and its retail subsidiaries. This agreement mandates significant safety improvements across all Dollar General stores, aiming to create safer environments for thousands of workers nationwide.

Lithuanian Data Protection Authority Fines Vinted €2.4 Million for GDPR Violations

On July 2, 2024, the State Data Protection Inspectorate (SDPI) of Lithuania imposed a substantial fine of €2,385,276 on Vinted, UAB, the company behind the popular online second-hand clothing trading platform "Vinted". The penalty comes after an investigation into complaints forwarded by French and Polish supervisory authorities in 2021 and 2022.

Armstrong Group to Pay $6.5M in False Claims Settlement with DOJ

Butler, Pennsylvania-based Armstrong Group has agreed to pay $6.5 million to settle allegations of violating the False Claims Act in relation to the Federal Communications Commission's (FCC) High-Cost Program. The settlement, announced on Friday, July 12, 2024, resolves claims that the company knowingly submitted improper costs to inflate subsidies received from the federal Universal Service Fund (USF).

Marathon Oil Hit with Record $241.5M Settlement for Clean Air Act Violations

The U.S. Justice Department and Environmental Protection Agency (EPA) have reached a $241.5 million settlement with Marathon Oil Company over Clean Air Act violations in North Dakota. The agreement, announced on Thursday, July 11, 2024, marks the largest civil penalty ever imposed for Clean Air Act violations at stationary sources.

Federal Regulators Impose $135.6 Million in Fines on Citigroup for Ongoing Compliance Issues

The Federal Reserve Board and the Office of the Comptroller of the Currency (OCC) have levied combined fines of $135.6 million against Citigroup and its subsidiary Citibank for persistent deficiencies in risk management and internal controls.