The New York Department of Financial Services filed its first enforcement action alleging violations of New York’s cybersecurity regulation that led to a breach of sensitive customer information. The action provides insight and guidance into the DFS’s enforcement priorities and a warning to other financial institutions.