Security biz Verkada to pay $3m penalty under deal that also enforces infosec upgrade

Verkada agreed to pay $2.95M to settle FTC claims about past email marketing (CAN-SPAM) violations, while the report also revisits a 2021 breach in which exposed admin credentials enabled attackers to view CCTV cameras across customer sites (initially reported as up to ~150,000 cameras, later described as a subset affecting customers). Regulators alleged broader security failings and required Verkada to implement a 20-year information security program with MFA, annual staff training, and third-party assessments.