Connecticut Senate Bill Raises the Stakes on Data Breach Response

Connecticut Senate Bill 117 would require entities experiencing a "massive breach" (at least 100,000 Connecticut residents affected) to immediately retain a qualified third-party forensic examiner, submit a detailed forensic report to the Connecticut Attorney General within 90 days of discovery, and face civil penalties for noncompliance ($100,000 for small businesses, $500,000 for others). This is a legislative/policy update rather than a description of an active cyber incident.