Cyber Capsule - February 2023
Before we jump into February developments — trigger warning if you are a Russian hacker — for those keeping track of breach notification requirements, the National Credit Union Administration (NCUA) Board approved a final rule, requiring a federally insured credit union to notify the NCUA within 72 hours after reasonably believing that a reportable cyber incident occurred. The notice does not need to provide a full incident assessment within 72 hours, but only an early alert for the NCUA. Effective Date: September 1, 2023.