Connecticut AG Enforces Data Privacy Laws, Targets Child Safety Risks in 2025 Report
In 2025, Connecticut’s Office of the Attorney General (OAG), led by Attorney General William Tong, intensified enforcement of the state’s data privacy laws, releasing a report under the Connecticut Data Privacy Act (CTDPA) that highlights aggressive oversight of corporate compliance and child safety risks online.
The OAG received 1,830 data breach notifications in 2025, issued 63 warning letters, and secured a $105,000 settlement with Omni Healthcare over a 2024 ransomware attack. The report details active investigations into platforms exploiting children’s data, including social media apps, messaging services, gaming platforms, and AI-driven chatbots. Additional enforcement actions targeted connected vehicles, geolocation data, data brokers, and privacy violations involving genetic and consumer health data.
Key updates include upcoming CTDPA amendments in July 2026, which are expected to strengthen protections further. The OAG’s efforts reflect Connecticut’s commitment to holding companies accountable for delayed breach notifications, inadequate disclosures, and failures to safeguard minors’ sensitive information.
Omni-HC cybersecurity rating report: https://www.rankiteo.com/company/omni-hc
"id": "OMN1770325683",
"linkid": "omni-hc",
"type": "Ransomware",
"date": "1/2025",
"severity": "100",
"impact": "5",
"explanation": "Attack threatening the organization's existence"{'affected_entities': [{'industry': 'Healthcare',
'location': 'Connecticut',
'name': 'Omni Healthcare',
'type': 'Healthcare'},
{'industry': ['Technology', 'Entertainment', 'AI'],
'type': ['Social Media Apps',
'Messaging Services',
'Gaming Platforms',
'AI-driven Chatbots']},
{'industry': ['Automotive', 'Data Services'],
'type': ['Connected Vehicles', 'Data Brokers']}],
'data_breach': {'sensitivity_of_data': 'High',
'type_of_data_compromised': ["Children's Data",
'Geolocation Data',
'Genetic Data',
'Consumer Health Data']},
'date_publicly_disclosed': '2025',
'description': 'In 2025, Connecticut’s Office of the Attorney General (OAG) '
'intensified enforcement of the state’s data privacy laws, '
'releasing a report under the Connecticut Data Privacy Act '
'(CTDPA) that highlights aggressive oversight of corporate '
'compliance and child safety risks online. The OAG received '
'1,830 data breach notifications, issued 63 warning letters, '
'and secured a $105,000 settlement with Omni Healthcare over a '
'2024 ransomware attack. The report details investigations '
'into platforms exploiting children’s data, including social '
'media apps, messaging services, gaming platforms, and '
'AI-driven chatbots. Additional enforcement actions targeted '
'connected vehicles, geolocation data, data brokers, and '
'privacy violations involving genetic and consumer health '
'data.',
'impact': {'financial_loss': '$105,000 (settlement)'},
'investigation_status': 'Ongoing',
'motivation': ['Financial Gain', "Exploitation of Children's Data"],
'references': [{'source': 'Connecticut Office of the Attorney General '
'Report'}],
'regulatory_compliance': {'fines_imposed': '$105,000',
'legal_actions': ['Settlement'],
'regulations_violated': ['Connecticut Data Privacy '
'Act (CTDPA)'],
'regulatory_notifications': ['1,830 data breach '
'notifications']},
'title': 'Connecticut AG Enforces Data Privacy Laws and Targets Child Safety '
'Risks',
'type': ['Data Breach', 'Ransomware', 'Privacy Violation']}