DOJ's Cyber Fraud Initiative: A Wake-up Call That Keeps Ringing

Over the past three years since Deputy Attorney General (DAG) Lisa Monaco announced the Initiative, DOJ has targeted a broad range of illegal conduct, including deficient cybersecurity standards, misrepresentation of cybersecurity practices and failure to timely report data security incidents. The number of cases and settlement amounts have also grown substantially to include seven publicly announced settlements that total more than $2.8 million dollars. In fact, in the last two months alone, DOJ announced three significant settlements totaling $1.4 million. See, "Consulting Companies to Pay $11.3M for Failing to Comply with Cybersecurity Requirements in Federally Funded Contract," Office of Public Affairs Department of Justice (June 17, 2024); "Staffing Company to Pay $2.7M for Alleged Failure to Provide Adequate Cybersecurity for COVID-19 Contact Tracing Data," Office of Public Affairs Department of Justice, (May 1, 2024).

The Initiative's results and DOJ's guidance on corporate compliance have made the point to government contractors and corporate America — "now is the time to invest and reinvest" in cybersecurity compliance. See, "Deputy Attorney General Lisa Monaco Delivers Keynote Remarks at the American Bar Association's 39th National Institute on White Collar Crime," Office of Public Affairs Department of Justice (Mar. 7, 2024).