Court Rules

Other Enforcement Actions

Privacy and consumer protection enforcement actions against other companies.

103

Total Actions

$428.1M

Total Fines

OR

U.S. Department of Agriculture

Consumer protection and civil rights lawsuit filed by Oregon AG and 20 other states against the U.S. Department of Agriculture over unlawful funding conditions that coerce states into complying with policies unrelated to nutrition programs. The conditions relate to immigration, DEI, and gender identity, and are alleged to violate the Spending Clause and Administrative Procedure Act. The suit seeks to block these conditions to protect billions in funding for programs like SNAP, WIC, and school lunches that serve vulnerable populations.

Notice Failure
OR

Trump Administration

Health enforcement action: Attorney General Rayfield led a coalition of 22 states and D.C. to secure a federal court order blocking the Trump Administration from threatening to cut off Medicare and Medicaid funding to healthcare providers that offer gender-affirming care to youth with gender dysphoria. The court ruled the administration's actions unlawful, protecting access to care and upholding the right to make personal healthcare decisions.

OR

U.S. Environmental Protection Agency

Environmental enforcement action where Oregon Attorney General Dan Rayfield, along with a coalition of states and cities, filed a lawsuit challenging the EPA's unlawful rescission of the 2009 Endangerment Finding on greenhouse gas emissions. The challenge argues that the rescission ignores scientific evidence and legal precedent, threatening public health and environmental protections.

Security Failure
FTC

Xponential Fitness

Consumer fraud enforcement action where the FTC settled with Xponential Fitness for violating the Franchise Rule by misrepresenting key information to franchisees, including time to open and costs. The settlement includes a $17 million monetary judgment for redress and prohibits future misrepresentations.

Notice Failure

$17.0M

OR

Trump Administration

Consumer protection enforcement action where Oregon Attorney General Dan Rayfield led a coalition of 24 states in filing a motion for a preliminary injunction to stop the Trump Administration's imposition of tariffs on imported goods. The states argue the tariffs are unlawful under the International Emergency Economic Powers Act and Section 122 of the Trade Act of 1974, as they cause financial harm to consumers and state governments by increasing prices and procurement costs.

CA

U.S. Department of Education

California Attorney General Rob Bonta filed a lawsuit against the U.S. Department of Education to block the expansion of IPEDS data collection requiring colleges to submit race-linked student data. The lawsuit argues the demand is arbitrary, capricious, and burdensome, and could enable costly partisan investigations. A multistate coalition co-led the challenge.

Student Data
CT

Department of Education

Connecticut Attorney General William Tong, joined by 17 other attorneys general, filed a lawsuit against the U.S. Department of Education to block new IPEDS data reporting requirements that demand student information disaggregated by race and sex. The coalition argues the rushed implementation is unlawful, invades student privacy, and risks unreliable data and baseless investigations. They seek an injunction to halt the data collection and protect student privacy.

Student DataNotice Failure
IL

U.S. Department of Education

Illinois Attorney General Kwame Raoul, joined by 16 other attorneys general, filed a lawsuit against the U.S. Department of Education to stop new data collection requirements under IPEDS that threaten student privacy by requesting sensitive personal information including income, test scores, and GPA.

Student Data
OR

Department of Education

Privacy enforcement action where Oregon AG and a coalition of 16 other states sue the Trump Administration to stop the Department of Education's new IPEDS data reporting requirements, arguing they jeopardize student privacy, lack proper definitions, and risk data errors and identification.

Unauthorized Data SharingNotice FailureSecurity Failure
MA

U.S. Department of Education

Massachusetts Attorney General Andrea Campbell co-led a coalition of 17 attorneys general in filing a lawsuit against the Trump Administration to stop new data reporting requirements for colleges and universities through IPEDS. The requirements demand detailed student data disaggregated by race and sex, retroactive for seven years, which the coalition argues jeopardizes student privacy and could lead to baseless investigations.

Student Data
CT

Aquarion Company

PURA preliminarily approved the sale of Aquarion Water Company to a new nonprofit Aquarion Water Authority, expected to double water rates. Attorney General Tong opposes the decision, citing loss of public oversight and high costs to consumers. The conversion removes PURA regulation, placing rate approvals under a board with no history of rejecting hikes.

NJ

Susaida Nazario

A former employee of the New Jersey Department of Children and Families was indicted for allegedly leaking confidential child protection case information in exchange for bribes. The defendant, Susaida Nazario, misused her access to provide case details to an unauthorized individual, compromising sensitive children's data.

Children's Data
OR

Trump Administration

Consumer protection lawsuit led by Oregon Attorney General Dan Rayfield, on behalf of a coalition of 24 states and two governors, challenging the Trump Administration's imposition of worldwide tariffs under Section 122 of the Trade Act of 1974. The suit alleges the administration is acting without legal authority, violating the Administrative Procedure Act and constitutional separation of powers, and causing immediate financial harm to American consumers and businesses through increased prices.

Consumer Fraud
IL

U.S. Department of Agriculture

Attorney General Raoul secured a court order preventing the U.S. Department of Agriculture from collecting SNAP applicants' and recipients' personal data without an agreed-upon protocol that restricts sharing with unrelated entities like the Department of Homeland Security. The court found that the USDA's proposed protocol would violate federal law by allowing data use for immigration enforcement, contrary to the intended purpose of SNAP.

Unauthorized Data Sharing
MA

U.S. Department of Agriculture

Massachusetts Attorney General Andrea Campbell secured a preliminary injunction from the U.S. District Court blocking the Trump Administration's USDA from cutting off SNAP funding to states that refuse to turn over personal data of SNAP applicants and recipients. The court found USDA's proposed data protocol unlawful because it allowed sharing data with entities unrelated to federal benefits administration.

Unauthorized Data Sharing
CA

U.S. Department of Health and Human Services

California Attorney General Rob Bonta sent a letter to the U.S. Department of Health and Human Services opposing a proposed rule that would eliminate model card requirements for AI tools in healthcare, warning that such rollbacks could lead to biased and unsafe healthcare decisions by reducing transparency.

AI/Automated DecisionsHealth Data
CA

U.S. Department of Agriculture

California Attorney General Rob Bonta secured a second preliminary injunction from the U.S. District Court for the Northern District of California blocking the Trump Administration's demand that states turn over personal data of SNAP applicants and recipients. The court found the USDA's proposed data protocol would allow sharing of state data with entities unrelated to federal benefits administration, violating federal law.

Unauthorized Data Sharing
OR

Devon T. Horace

Consumer protection case involving theft of charitable funds. Former Alberta Main Street president Devon T. Horace pleaded no contest to theft and falsifying business records, paid $85,080.95 in restitution, and was sentenced to probation and community service.

Security Failure
OR

U.S. Department of Health and Human Services and Centers for Disease Control and Prevention

Health enforcement case: Oregon Attorney General Dan Rayfield, along with a coalition of states, filed a lawsuit challenging the Trump Administration's overhaul of the childhood immunization schedule. The complaint alleges that HHS Secretary RFK Jr. and CDC officials bypassed federal law, ignored scientific evidence, and endangered children by demoting key vaccines from the recommended schedule. The states seek to declare the actions unlawful and enjoin the new policy.

OR

Internal Revenue Service

Environmental and consumer protection enforcement action. Oregon Attorney General Dan Rayfield led a coalition of 16 states in filing an amicus brief supporting a lawsuit against the IRS. The challenge contests a new IRS rule that removes a key pathway (5% investment test) for wind and solar projects to qualify for federal clean energy tax credits. The states argue the rule is unlawful, arbitrary, will increase energy costs for families and businesses, and undermine state clean energy goals and investments.

OR

U.S. Immigration and Customs Enforcement

Civil rights enforcement action where Oregon Attorney General submitted evidence supporting a lawsuit against federal agents for excessive use of force and First Amendment violations during protests at the Portland ICE building. The AG urges the court to issue a preliminary injunction to stop unlawful crowd-control measures.

Security Failure
OR

Ryan Tong

Consumer protection case involving charity fraud. A former Orangetheory Fitness instructor pleaded guilty to stealing charitable donations collected during workout classes between 2021 and 2024. He diverted over $24,000 intended for charities to his personal Venmo account to fund his cocaine habit. The Oregon DOJ and Multnomah County DA's Office pursued criminal charges and civil claims to secure restitution and prevent future charitable sector involvement.

CA

U.S. Department of Health and Human Services

California Attorney General Rob Bonta, alongside attorneys general from New York, Colorado, Illinois, and Minnesota, filed a motion for preliminary injunction to continue blocking the Trump Administration's unlawful freeze of $10 billion in federal funding for child care and family assistance programs and to prevent broad data requests for personally identifiable information of millions of residents. The funding freeze targets five Democratic-led states without evidence of fraud, and the data requests are part of the challenged unlawful actions. A temporary restraining order was previously granted blocking these measures.

Unauthorized Data Sharing
CA

U.S. Department of Justice

California Attorney General Rob Bonta joined a multistate coalition in filing an amicus brief opposing the U.S. Department of Justice's subpoena for patient records from University of Pittsburgh Medical Center related to gender-affirming care. The brief argues that the subpoena violates patient privacy, infringes on states' rights to regulate medicine, and exceeds DOJ's statutory authority.

Health DataChildren's Data
OR

U.S. Department of Health and Human Services

Civil rights and health enforcement action where Oregon Attorney General Dan Rayfield, joined by 11 other states, sued the U.S. Department of Health and Human Services (HHS) over a policy that conditions federal health, education, and research funding on states' agreement to discriminate

FTC

Sports agents

Consumer fraud investigation where the FTC is seeking information from 20 universities about whether sports agents are complying with the Sports Agent Responsibility and Trust Act (SPARTA), which requires disclosures to student athletes and notification to schools. The inquiry aims to ensure student athletes are protected from deceptive practices by agents.

Notice Failure
MA

Trump Administration

Massachusetts Attorney General Andrea Campbell filed a motion to enforce a preliminary injunction against the Trump Administration's demands for personal data of SNAP recipients. The court previously blocked such demands, but the administration renewed its request, threatening to withhold funding. The AG seeks to ensure compliance with federal privacy laws and protect SNAP recipients' sensitive information.

Unauthorized Data SharingChildren's Data
OR

Federal Law Enforcement Agencies

Civil rights investigation by the Oregon Attorney General into an incident where federal agents shot two people in Portland, examining whether officers acted outside lawful authority and addressing concerns about a pattern of excessive force.

Security Failure
CT

Trump Administration

Attorney General William Tong joined a coalition of 21 states and D.C. in suing the Trump administration to prevent the defunding of the Consumer Financial Protection Bureau (CFPB). The lawsuit argues that the defunding is unlawful and would cripple consumer protection efforts and state enforcement capabilities. The coalition seeks a court order to ensure CFPB continues to receive funding and fulfill its duties.

CT

PFAS Manufacturers and Importers

Attorney General William Tong led a coalition of 15 attorneys general in submitting a comment letter to the EPA opposing the Trump Administration's proposal to roll back PFAS reporting requirements under the Toxic Substances Control Act. The coalition argues that the exemptions would shield most manufacturers from reporting critical information about PFAS chemicals, hindering efforts to protect public health and the environment.

Notice Failure
OR

Consumer Financial Protection Bureau

Consumer protection case where Oregon AG sued the Trump administration to prevent defunding of the CFPB, arguing it would harm consumers and state enforcement efforts. The CFPB provides critical data and complaint handling for financial consumer protection.

FTC

Illusory Systems, Inc.

The FTC has taken action against Illusory Systems, Inc. (doing business as Nomad) for failing to implement adequate data security measures, which led to a breach where hackers stole $186 million from consumers. The company is required to return the stolen funds and implement an information security program.

Security FailureData Breach

$186.0M

OR

Trump Administration

Environmental enforcement action: Oregon Attorney General Dan Rayfield joined a multistate lawsuit against the Trump Administration for unlawfully freezing federal funding approved by Congress for electric vehicle charging infrastructure. The freeze, implemented by the U.S. Department of Transportation, halts critical projects to modernize freight corridors, reduce pollution, and support EV adoption, including a $102 million Pacific Northwest project for medium- and heavy-duty trucks. The lawsuit seeks a court order to release the funds and allow states to proceed with Congressionally authorized projects.

OR

Trump Administration

Consumer protection case where Oregon Attorney General Dan Rayfield secured a federal court order blocking the Trump administration from imposing financial penalties on states for SNAP operations, ensuring that lawful permanent residents continue to receive benefits without disruption.

OR

U.S. Department of Homeland Security

Other enforcement action: Oregon Attorney General Dan Rayfield, joined by 18 other states, sued the Trump Administration over its unlawful $100,000 fee for H-1B visa petitions. The lawsuit alleges that the policy violates the Administrative Procedure Act by exceeding congressional authority and bypassing required rulemaking procedures, harming educational institutions and employers.

OR

Federal Emergency Management Agency

This legal enforcement action involves Oregon Attorney General Dan Rayfield, leading a coalition of 20 states, securing a court victory against the Trump Administration's unlawful attempt to terminate the BRIC disaster preparedness program. The court ruled that the termination violates appropriations laws and the Administrative Procedures Act, requiring restoration of billions in funding to protect communities from natural disasters.

CA

U.S. Department of Homeland Security

California Attorney General Rob Bonta co-led a coalition of 18 attorneys general in submitting a comment letter opposing the Department of Homeland Security's expansion of the Systematic Alien Verification for Entitlements (SAVE) program to include U.S.-born citizens. The coalition argues the expansion violates the Privacy Act of 1974, creates a massive surveillance database, increases data breach risks, and will lead to inaccurate verifications and denial of benefits.

Surveillance PricingUnauthorized Data Sharing
OR

U.S. Department of Agriculture

Consumer protection case where Oregon AG Dan Rayfield led a multi-state lawsuit to block USDA guidance that unlawfully restricts SNAP eligibility for legal immigrants, arguing it contradicts federal law and could cause wrongful benefit terminations.

OR

U.S. Department of Housing and Urban Development (HUD)

Civil rights and housing policy enforcement action where Oregon Attorney General Dan Rayfield, with a coalition of 20 states and two governors, sued HUD for unlawfully changing Continuum of Care grant requirements that would slash permanent housing funding by ~70% and impose barriers like gender recognition restrictions, threatening housing stability for tens of thousands.

CT

U.S. Congress

Attorney General William Tong and a bipartisan coalition of 36 attorneys general sent a letter to Congress opposing efforts to ban state AI laws. They argue that state laws are necessary to protect residents from AI harms in the absence of federal protections. The coalition urges Congress to work with them on federal AI protections instead.

OR

U.S. Department of Homeland Security and U.S. Department of Justice

Civil rights enforcement action where Oregon Attorney General and three local District Attorneys issued a formal demand letter to federal agencies, citing a pattern of excessive and unlawful force by DHS officers during immigration operations that endangered residents and other law enforcement, and threatening investigations and potential prosecutions if conduct does not change.

CA

California Attorney General Rob Bonta

California Attorney General Rob Bonta joined a bipartisan coalition of 36 state attorneys general in sending a letter to Congress opposing a proposed provision in the National Defense Authorization Act that would preempt state laws addressing AI risks. The coalition argues that states must retain authority to mitigate AI harms, particularly to children, and that state-level enforcement is critical for protecting residents from emerging threats like deepfakes and harmful AI interactions.

CA

City of El Cajon and El Cajon Police Department

California Attorney General Rob Bonta filed a lawsuit against the City of El Cajon for unlawfully sharing Automated License Plate Reader (ALPR) data with over 100 out-of-state law enforcement agencies, violating state law that restricts such data to California public agencies. The AG is seeking a court order to halt the sharing and compel compliance with state privacy protections.

Unauthorized Data SharingSurveillance Pricing
CT

The Office of the Attorney General William Tong

Governing Magazine recognized Connecticut Attorney General William Tong as a 2025 Public Official of the Year for his bipartisan enforcement leadership, highlighting major settlements including the $6 billion Purdue Pharma opioid case and $440 million JUUL e-cigarette marketing settlement.

FTC

Kars-R-Us.com, Inc.

The FTC and 19 states settled with Kars-R-Us.com, Inc. and its operators for deceptive charity fundraising claims, where only 0.28% of over $45 million raised was used for breast cancer screenings. Operators face permanent fundraising bans and a $3.88 million monetary judgment.

Notice Failure

$3.9M

NY

United States Department of Agriculture

New York Attorney General Letitia James and a coalition of 20 other states sued the U.S. Department of Agriculture to stop its demand for personal information of SNAP recipients for immigration enforcement. The District Court issued a temporary restraining order blocking USDA's demand and preventing funding cuts, citing violations of laws protecting SNAP data confidentiality.

Unauthorized Data Sharing
CT

Businesses

Connecticut, California, and Colorado attorneys general, along with the California Privacy Protection Agency, announced a joint investigative sweep targeting businesses that fail to honor Global Privacy Control (GPC) signals, which allow consumers to opt-out of the sale of their personal information. The coalition sent letters to non-compliant businesses demanding immediate compliance with state privacy laws requiring respect for consumer opt-out preferences.

Opt-Out Failure
CPPA

Multiple businesses

The California Privacy Protection Agency, together with the Attorneys General of California, Colorado, and Connecticut, announced an investigative sweep targeting businesses that fail to honor Global Privacy Control (GPC) signals, which automatically communicate consumers' opt-out requests. The coalition is contacting identified businesses and demanding immediate compliance with state privacy laws. This coordinated effort highlights the states' commitment to enforcing consumers' right to opt-out of the sale of their personal information.

Opt-Out Failure
CT

U.S. Department of Agriculture

Attorney General William Tong is seeking a preliminary injunction to block the U.S. Department of Agriculture from forcing states to share private data of SNAP participants, including social security numbers and shopping history. USDA is threatening to cut off administrative funding if states do not comply, which AG Tong argues violates federal privacy laws and the Constitution.

Unauthorized Data Sharing
CT

U.S. Department of Agriculture

Attorney General William Tong, leading a coalition of 22 states, filed a lawsuit against the U.S. Department of Agriculture for demanding that states disclose sensitive personal data of SNAP recipients. The demand violates federal privacy laws and the Constitution, and threatens to withhold critical funding. The lawsuit seeks to block USDA from conditioning SNAP administrative funds on data disclosure.

Unauthorized Data Sharing
CT

MAKECTBETTER LLC

Connecticut Attorney General William Tong filed a lawsuit against MAKECTBETTER LLC and individuals for operating a fraudulent scheme selling fake cannabis licenses. The defendants forged state documents and charged businesses up to $50,000 for non-existent licenses. The AG is seeking a $2.5 million prejudgment remedy to freeze the defendants' assets.

$2.5M

NJ

U.S. Department of Agriculture

New Jersey Attorney General Matthew J. Platkin joined a coalition of 20 attorneys general in filing a lawsuit against the U.S. Department of Agriculture (USDA) for demanding that states turn over sensitive personal information of SNAP recipients, including Social Security numbers and addresses. The lawsuit argues that this demand violates federal privacy laws and the Constitution, as the data is protected and should only be used for program administration. The coalition seeks to block USDA from conditioning SNAP funding on compliance with this demand.

Unauthorized Data SharingConsent Failure
MA

U.S. Department of Agriculture

Massachusetts Attorney General Andrea Campbell, joined by a coalition of 21 states and Kentucky, filed a lawsuit challenging the U.S. Department of Agriculture's demand that states turn over sensitive personal data of SNAP recipients. The lawsuit argues that this demand violates federal privacy laws and the Spending Clause, threatening the privacy of millions of low-income families and coercing states by threatening funding cuts.

Unauthorized Data Sharing
NY

United States Department of Agriculture

New York Attorney General Letitia James, joined by 20 other states and Kentucky, filed a lawsuit challenging the Trump administration's policy requiring states to disclose personal information of SNAP recipients to federal agencies. The policy violates privacy laws by demanding sensitive data like Social Security numbers for potential immigration enforcement. The coalition seeks a court injunction to stop the illegal data sharing.

Unauthorized Data Sharing
CT

House Bill No. 7181

Connecticut passed House Bill No. 7181 to strengthen enforcement against illegal cannabis and tobacco sales by increasing penalties, allowing municipalities to retain civil penalties, and creating a task force. The law also expands bans on online sales of e-cigarettes and improves age verification to prevent youth access to addictive products.

CT

Office of the Attorney General

The Connecticut Office of the Attorney General released an updated enforcement report on the Connecticut Data Privacy Act (CTDPA) for 2024, summarizing investigations into companies handling connected vehicles, genetic data, palm recognition, teen messaging apps, and facial recognition. The report outlines expanded enforcement priorities around opt-out practices and dark patterns, and includes legislative recommendations to strengthen the CTDPA.

Opt-Out FailureDark PatternsChildren's Data
NY

Elon Musk and DOGE

New York Attorney General Letitia James led a multistate coalition to sue the Trump administration for allowing Elon Musk and DOGE unauthorized access to the Treasury Department's central payment system, exposing Americans' sensitive personal information. A federal court granted a preliminary injunction blocking this access and ordering the destruction of any obtained records.

Unauthorized Data Sharing
CT

Department of Government Efficiency (DOGE)

Connecticut Attorney General William Tong, leading a coalition of 19 attorneys general, secured a temporary restraining order blocking DOGE and Elon Musk from accessing Treasury Department payment systems containing sensitive personal data. The court found the Trump Administration illegally granted unauthorized access, exposing Americans' bank account details and Social Security numbers. The order mandates destruction of downloaded materials and restricts access to vetted civil servants.

Data BreachUnauthorized Data Sharing
NY

Trump administration

A coalition of attorneys general sued the Trump administration for illegally granting Elon Musk and DOGE access to the Treasury Department's payment system, exposing sensitive personal data of millions of Americans. The court granted a temporary restraining order blocking further access and ordering destruction of obtained records. The states are seeking a preliminary injunction to continue the protection.

Unauthorized Data Sharing
NY

Elon Musk and DOGE

New York Attorney General Letitia James led a multistate lawsuit against Elon Musk and his Department of Government Efficiency (DOGE) for gaining unauthorized access to the U.S. Treasury's payment system, which contains Americans' sensitive personal data and controls vital funding. A federal judge granted a temporary restraining order blocking DOGE from accessing this data and requiring the destruction of any records already obtained, with a preliminary injunction hearing set for February 14, 2025.

Unauthorized Data Sharing
CT

U.S. Department of the Treasury

Connecticut Attorney General William Tong filed a lawsuit against President Trump and the U.S. Treasury Department to stop DOGE's unauthorized access to the Treasury's central payment system, which contains sensitive personal information like bank details and Social Security numbers. The lawsuit seeks an injunction and a declaration that the new policy granting access to Elon Musk and DOGE members is unlawful and jeopardizes data security.

Data BreachSecurity Failure
NY

Trump administration

New York Attorney General Letitia James led a coalition of 19 states in filing a lawsuit against the Trump administration for illegally granting Elon Musk and DOGE access to the Treasury's payment system, exposing Americans' sensitive personal information. The lawsuit seeks an injunction to halt this policy and a declaration that it is unlawful and unconstitutional.

Unauthorized Data Sharing
NJ

U.S. Department of Treasury

New Jersey Attorney General Matthew J. Platkin joined a coalition of 19 attorneys general in filing a lawsuit against the Trump administration for illegally granting Elon Musk and DOGE unauthorized access to the U.S. Treasury Department's central payment system, which contains sensitive personal information such as Social Security numbers and bank details. The lawsuit seeks an injunction to halt this policy and a declaration that it is unlawful and unconstitutional.

Security Failure
IL

Trump Administration

A coalition of 18 state attorneys general, led by Illinois AG Kwame Raoul, filed a lawsuit against the Trump administration to stop a policy that grants Elon Musk and DOGE unauthorized access to the Treasury Department's payment system, which contains sensitive personal information like bank details and Social Security numbers. The lawsuit seeks an injunction and a declaration that the policy is unlawful, arguing it violates federal law and jeopardizes data security.

Unauthorized Data Sharing
CT

U.S. Department of the Treasury

Connecticut Attorney General William Tong joined a coalition of 12 attorneys general to announce they will file a lawsuit against the U.S. Department of the Treasury and DOGE for unlawfully granting Elon Musk and DOGE staff access to sensitive personal information and payment systems. The AGs argue this unauthorized access threatens privacy rights and essential payments for millions of Americans. The lawsuit seeks to revoke access and prevent further interference.

Unauthorized Data SharingSecurity Failure
FTC

Marriott International, Inc. and its subsidiary Starwood Hotels & Resorts Worldwide LLC

The FTC finalized an order against Marriott International and Starwood Hotels for failing to implement reasonable data security, which led to three data breaches affecting over 344 million customers. The companies must implement a comprehensive security program, delete unnecessary personal information, allow U.S. customers to request deletion, and restore stolen loyalty points. They are also prohibited from misrepresenting their data security practices.

Security Failure
CT

Firearms Industry

Connecticut Attorney General William Tong announced a multistate coalition of 16 attorneys general to use civil enforcement against irresponsible members of the firearms industry. The coalition will enforce state consumer protection and liability laws to reduce gun violence, with past actions including lawsuits against Glock for machine gun conversions and ghost gun dealers.

CT

Vision Solar

The Connecticut Attorney General obtained a $5 million stipulated judgment against Vision Solar for alleged deceptive sales practices, including high-pressure tactics, misrepresentations, and performing unpermitted work. Although the company is bankrupt and cannot pay, the judgment establishes binding operational standards for solar companies in Connecticut regarding disclosures, contracting, permitting, and use of licensed contractors.

Consent FailureNotice Failure

$5.0M

NY

Marriott International, Inc.

Marriott International agreed to a $52 million multistate settlement after a data breach exposed 131.5 million customers' personal information due to undetected intruders in Starwood's system from 2014 to 2018. The settlement mandates significant cybersecurity improvements, including third-party assessments, data minimization, and enhanced training.

Data BreachSecurity Failure

$52.0M

TX

Marriott International, Inc.

Marriott International, Inc. suffered a data breach exposing 131 million guest records, including personal and payment information. The Texas Attorney General secured a $3.5 million settlement as part of a $52 million multistate agreement, requiring Marriott to enhance its data security practices with zero-trust principles and regular reporting to the CEO.

Data Breach

$52.0M

NJ

Marriott International, Inc.

A multistate coalition of 50 attorneys general, including New Jersey, reached a $52 million settlement with Marriott International, Inc. for two data breaches that exposed personal information of over 131 million consumers. The breaches resulted from inadequate cybersecurity practices at Starwood and Marriott networks. The settlement mandates comprehensive security improvements and monetary penalties.

Data BreachSecurity Failure

$52.0M

CT

Marriott International, Inc.

A multistate settlement with Marriott International for a data breach affecting 131.5 million guest records. Marriott failed to secure the Starwood network from 2014 to 2018, exposing personal information. The settlement includes a $52 million payment and requires Marriott to implement enhanced cybersecurity measures and consumer protections.

Security FailureData Breach

$52.0M

FTC

Marriott International, Inc. and Starwood Hotels & Resorts Worldwide LLC

The FTC charged Marriott International and Starwood Hotels with failing to implement reasonable data security, leading to three data breaches affecting over 344 million customers. Under a proposed consent order, the companies must implement a comprehensive information security program, certify compliance annually for 20 years, and provide customers with ways to delete personal information and restore stolen loyalty points.

Security FailureData Breach
CPPA

California Privacy Protection Agency

The California Privacy Protection Agency (CPPA) issued an enforcement advisory clarifying that dark patterns—user interfaces that subvert consumer autonomy in making privacy choices—violate the California Consumer Privacy Act (CCPA). The advisory emphasizes that businesses must present opt-out options clearly and symmetrically, focusing on the effect rather than intent. It directs consumers to report suspected violations and provides resources for businesses to comply.

Dark Patterns
CT

EnergyBillCruncher.com

Connecticut Attorney General William Tong announced an investigation into EnergyBillCruncher for making false claims that the government would cover solar installation costs, misusing the state seal, and creating false urgency. The investigation seeks information on the company's ownership, consumer interactions, and partnerships. This is part of broader actions against deceptive solar sales tactics.

Notice FailureDark Patterns
CT

Connecticut Office of the Attorney General and Department of Consumer Protection

The Connecticut Attorney General and Consumer Protection Commissioner announced a public service announcement to warn about illegal, unsafe cannabis edibles that mimic kid-friendly snacks. The agencies highlighted ongoing enforcement actions against retailers selling unregulated delta-8 THC products, with four judgments secured totaling $40,000, and ten pending actions. The PSA aims to protect children from accidental ingestion of potent, untested products.

$40K

CT

Connecticut Office of the Attorney General

The Connecticut Office of the Attorney General released a mandated report on the Connecticut Data Privacy Act (CTDPA), detailing over a dozen notices of violation issued to companies across various industries for deficiencies in privacy disclosures and consumer rights mechanisms. The report highlights common compliance failures and reaffirms the AG's commitment to enforcement and education under the state's consumer privacy law.

Notice FailureOpt-Out Failure
CT

CT UCC Statement Service

Connecticut officials, including Attorney General William Tong, warned businesses about a scam by CT UCC Statement Service, which charges $90 for free UCC reports. The company's mailings are designed to look like government documents, but reports are available for free at business.ct.gov. Businesses should verify notices and avoid paying fees for free services.

Dark Patterns
FTC

Federal Trade Commission

Attorney General William Tong of Connecticut led a bipartisan coalition of 30 state attorneys general in submitting comments to the Federal Trade Commission. The comments aim to improve collaboration between the FTC and state AGs to prevent and prosecute unfair and deceptive practices, addressing issues raised by the AMG Capital decision that may limit restitution. The coalition emphasizes the importance of joint efforts for national consumer protection.

CT

The Office of the Attorney General William Tong

Attorney General William Tong of Connecticut joined a bipartisan coalition of 44 attorneys general to issue a letter supporting the G.U.A.R.D. VA Benefits Act. The legislation aims to hold unaccredited and unregulated actors accountable for defrauding veterans applying for VA benefits by requiring proper accreditation and imposing penalties, as unaccredited services waste veterans' money and time and may lead to fraud and identity theft.

CT

The Office of the Attorney General William Tong

Attorney General William Tong of Connecticut joined a multistate coalition of 21 attorneys general in filing an amicus brief to defend the federal government's ability to communicate with social media companies about dangerous online content. The coalition opposes a preliminary injunction that prohibits such communications, arguing it undermines public safety efforts and must be overturned. The brief highlights examples of productive dialogue on issues like election security, public health emergencies, and consumer protection.

CT

Connecticut Attorney General's Office

Connecticut Attorney General William Tong released guidance affirming that state and federal anti-discrimination laws continue to protect LGBTQ+ rights following the U.S. Supreme Court's decision in 303 Creative v. Elenis. The memo explains that the ruling's narrow exception for custom expressive works does not undermine Connecticut's broader public accommodations laws, which prohibit discrimination in marriage, employment, housing, credit, and hate crimes. The AG's office vows to remain vigilant and use enforcement authority to protect LGBTQ+ residents.

CT

Connecticut

The Connecticut legislature passed a series of consumer protection bills backed by Attorney General William Tong. The legislation modernizes anti-robocall laws, requires all-in pricing for ticket sales, prohibits post-cancellation cable billing charges, and enhances geolocation data breach notification requirements. The bills now await Governor Ned Lamont's signature.

Geolocation Data
CT

C F Division Services, LLC

Connecticut Attorney General William Tong and Secretary of State Stephanie Thomas warned businesses about a scam by C F Division Services, LLC, which sends solicitations mimicking government notices for free UCC reports while charging $90. The company's disclaimer is not clear and conspicuous, and the AG has demanded information via letter while investigating the deceptive practices.

Notice Failure
CT

Airlines

Attorney General William Tong led a bipartisan coalition of 41 attorneys general in urging the U.S. Department of Transportation to strengthen consumer protections for airline passengers, criticizing a proposed rule as insufficient. The coalition called for mandatory refunds for cancellations, compensation for delays, and prohibitions on practices like upselling after cancellations, amid over 260 complaints received by Connecticut AG's office.

CT

American Airlines

Connecticut Attorney General William Tong joined a multi-state coalition urging Congress to allow state attorneys general to enforce airline consumer protections, citing thousands of complaints about refunds, cancellations, and poor customer service, with airlines often citing federal preemption to avoid state intervention. Examples include American Airlines refusing refunds during the pandemic, highlighting the need for stronger penalties and enforcement.

CT

Solar Wolf Energy, Inc.

Connecticut Attorney General William Tong and the Department of Consumer Protection announced an enforcement action against Solar Wolf Energy, Inc. for unfair and deceptive sales practices. The company took high-priced deposits from consumers for residential solar projects but failed to complete or even begin the work and did not return deposits. A Superior Court order now blocks Solar Wolf from selling or advertising in Connecticut until it responds to the investigation.

Consent Failure
CT

Public Power

Connecticut Attorney General and Consumer Counsel announced a $3 million settlement with electric supplier Public Power for failing to publish required 'next cycle rate' information, which denied consumers the opportunity to switch suppliers to avoid rate increases. As part of the settlement, Public Power and its sister companies must permanently exit the Connecticut market, and the funds will be used to pay down unpaid electric bills for hardship customers.

Notice Failure

$3.0M

CT

Malicious actors marketing illicit copycat THC edibles

Attorney General William Tong joined a bipartisan coalition of attorneys general to urge Congress to enact legislation allowing trademark holders to hold accountable sellers of unregulated cannabis copycat products that resemble popular snacks and cause accidental THC ingestion in children. The coalition highlighted the public health risk and called for federal action to stop the spread of these dangerous products.

CT

Carnival Cruise Line

Connecticut, co-leading a multistate investigation, secured a $1.25 million settlement with Carnival Cruise Line over a 2019 data breach affecting approximately 180,000 individuals nationwide. The breach exposed sensitive data including passport numbers, driver's licenses, payment card information, and health data, with a 10-month delay in notification. Carnival agreed to implement enhanced email security measures, a breach response plan, and an independent security assessment.

Data BreachSecurity FailureBreach Notification Delay

$1.3M

NJ

Carnival Cruise Line

New Jersey, as part of a multistate coalition, settled with Carnival Cruise Line over a 2019 data breach that compromised personal information of approximately 180,000 employees and customers nationwide. The breach resulted from deficiencies in Carnival's data security program and delayed breach notification. Carnival will pay $1.25 million and implement enhanced email security and breach response measures.

Data BreachSecurity FailureBreach Notification Delay

$1.3M

CT

Reynolds Consumer Products

Connecticut Attorney General William Tong sued Reynolds Consumer Products for violating the Connecticut Unfair Trade Practices Act by falsely marketing Hefty 'Recycling Bags' as recyclable and suitable for recycling programs, despite knowing they are incompatible with Connecticut's recycling facilities and cause contamination. The lawsuit seeks damages, injunctive relief, and other remedies to stop the deceptive practice.

Notice Failure
CT

The Office of the Attorney General William Tong

Connecticut Attorney General William Tong joined a coalition of 19 attorneys general in a letter to congressional leaders urging federal legislation to protect reproductive healthcare access post-Dobbs. The letter proposes measures including requiring insurance plans to cover abortion, eliminating the Hyde Amendment, protecting medication abortion, and strengthening data privacy laws to prevent surveillance of reproductive health data and geofencing near clinics.

Health DataGeolocation Data
CT

home warranty companies

Connecticut Attorney General William Tong issued a public warning about deceptive home warranty advertisements that impersonate mortgage lenders. The ads use high-pressure tactics and false urgency to sell unnecessary warranties. Consumers are advised to research, read contracts carefully, and avoid sharing personal information with unknown companies.

Dark Patterns
CT

The Office of the Attorney General William Tong

Connecticut Attorney General William Tong joined a bipartisan coalition of 51 attorneys general in urging the FCC to require gateway providers to implement STIR/SHAKEN caller ID authentication and take additional measures to block foreign-based illegal robocalls that scam Americans.

Security Failure
CT

Associated Community Services

The Connecticut Attorney General announced an enforcement action against Associated Community Services for operating a massive telefunding scheme that bombarded 67 million consumers with 1.3 billion deceptive fundraising calls, fraudulently collecting over $110 million. The action resulted in hundreds of millions of dollars in fines and a permanent prohibition from fundraising, forcing the sale of assets purchased with illegal proceeds.

Notice Failure
NJ

Command Marketing Innovations, LLC and Strategic Content Imaging, LLC

Command Marketing Innovations, LLC and Strategic Content Imaging, LLC settled allegations that they violated the New Jersey Consumer Fraud Act and HIPAA by failing to safeguard protected health information, exposing the data of 55,715 New Jersey residents. The companies agreed to pay $130,000 in penalties and implement comprehensive security measures, including appointing security officers and providing employee training.

Data BreachHealth DataSecurity Failure

$130K

CT

Unlicensed Cannabis Sellers

Attorney General William Tong issued a public warning about unregulated and illegal cannabis edibles sold in packaging that mimics popular snack foods, posing significant risks to children through accidental THC overdose. The AG highlighted the dangers of these look-alike products and urged reporting, while noting that legal cannabis sales in Connecticut will enforce strict packaging standards.

NJ

Kristan T. Bell

A caseworker with the New Jersey Division of Child Protection and Permanency was charged with criminal offenses for allegedly accessing and disclosing confidential DCF database records without authorization. The charges include Computer Theft and Unlawful Access and Disclosure. The investigation was conducted by the New Jersey State Police.

Children's DataUnauthorized Data Sharing
CT

Connecticut Office of the Attorney General

Connecticut Attorney General William Tong and Department of Consumer Protection Commissioner Michelle Seagull issued a consumer warning following Tropical Storm Henri about common disaster-related scams, including fraudulent contractors, fake charities, job scams, and used car scams. The release provides specific advice for consumers on how to verify contractors and charities and avoid common scam tactics.