Skip to Content
Colorado Attorney General

Phil Weiser

Colorado Attorney General

File A Complaint
  • About Us
    • Attorney General Bio & Photos
    • Vision & Values
    • Senior Staff & Organization
    • Colorado Attorney General Annual Report
    • Attorney General Opinions
    • Contact Our Office
  • Sections
    • Administration
    • Business & Licensing
    • Civil Litigation & Employment Law
    • Consumer Protection
    • Criminal Appeals
    • Criminal Justice
    • Natural Resources & Environment
    • Division of Community Engagement
    • Revenue & Utilities
    • State Services
  • Careers
    • Attorney & Other Non-Classified Positions
    • Fellowships
    • Internships
    • Classified Staff Positions
    • Other Opportunities to Join our Team
  • Media Center
    • Press Room
    • Colorado Open Records Act – CORA
  • Resources
    • Survivors of Childhood Sexual Abuse
    • Victim Assistance
    • Budget & Accounting
    • Colorado Privacy Act
    • Code of Colorado Regulations
    • Colorado Revised Statutes
    • Coronavirus Information
    • Data Protection Laws
    • Funding Opportunities
    • Office of Financial Empowerment
    • Student Loans
    • Transparency Online Project (TOPS)
  • Licensing
    • Business Resources
    • Collection Agencies & Debt Collectors
    • UCCC Licensing & Notification
    • Debt Management Services Providers
    • Health Club Bonds
    • Repossessors
    • Student Loan Servicers: Licensing
    • Telemarketing
  • Recursos en español

Colorado mobile home company to pay $25,000, implement new safety measures after data of more than 700 Coloradans exposed

June 14, 2021—Attorney General Phil Weiser today announced that Colorado-based mobile home park management company Impact MHC will pay $25,000 and implement new safety measures after more than 15,000 people’s sensitive information was exposed in a data breach, including 719 Coloradans.

Impact MHC failed to properly safeguard sensitive information and allowed employees to send and maintain that information in their email accounts. In October 2018, criminals used a phishing scam to access Impact MHC’s employee email accounts that contained confidential personal information of Impact’s customers and employees, including Social Security numbers and financial details. The criminals had access to the accounts until July 2019.

After discovering the data breach, Impact took 10 months to provide notice to Colorado consumers, even though Colorado law generally requires notice of a data breach no later than 30 days after the breach occurs.

“Now more than ever companies must remain vigilant in the digital world,” said Weiser. “A data breach like the one at Impact MHC can put important consumer financial and personal information in the hands of the wrong people and cause significant harm to Coloradans and their families, as we have seen recently with regard to the unemployment insurance fraud that has led to over one million fraudulent claims. We will continue to hold companies accountable for safeguarding residents’ data.”

In today’s settlement, the company agreed to pay $25,000 to the Colorado Attorney General’s Office, and an additional $30,000 if it fails to implement other measures, like creating a written information disposal policy, a comprehensive cybersecurity program, and an incident response plan in the event of future data security incidents.

As cybercrime and identity theft pose an increasing threat to Coloradans, state law requires companies that maintain sensitive personal information to take reasonable steps to protect the information, dispose of it when it is no longer needed, and notify Colorado residents promptly when their information is at risk of being misused by unauthorized third parties.

Click here to learn more about companies’ responsibilities in the event of a data breach.

###

Media Contact:
Lawrence Pacheco
Director of Communications
(720) 508-6553 office | (720) 245-4689 cell
Lawrence.pacheco@coag.gov

Most Recent

Attorney General’s Office to expand grant to revitalize rural housing, support trades programs in southern Colorado

Feb. 3, 2023 (DENVER) – Attorney General Phil Weiser today announced that his office is expanding its rural housing revitalization grant to support a new trades program at Pueblo Corporate College, a division of Pueblo Community College, and expanded programs […]

Attorney General Phil Weiser appoints new solicitor general, deputy attorney general for consumer protection

Jan. 31, 2023 (DENVER)— Attorney General Phil Weiser today announced the appointments of Shannon Wells Stevenson as solicitor general, and Nathan Blake as deputy attorney general of the Consumer Protection Section in the Colorado Department of Law. Stevenson is a […]

Statement from Attorney General Phil Weiser on the beating death of Tyre Nichols in Memphis, Tenn.

Jan. 28, 2023 (DENVER)–Attorney General Phil Weiser issued a statement following the release of body-camera footage in the beating death of Tyre Nichols: “The brutal beating and killing of Tyre Nichols is horrifying. I am outraged, as we all should […]

Office of the Attorney General
Colorado Department of Law
Ralph L. Carr Judicial Building
1300 Broadway, 10th Floor
Denver, CO 80203

(720) 508-6000

Contact the Office of the Attorney General

Contact

Facebook
Twitter
f1d1bytI9YQhG_bFpYADFSRitVTGQyVRVmoQHvulvq4=.html