Publications
Allaying Ransomware Threat To Private Funds Amid Pandemic
Law360
September 2020
Cybercriminals are targeting businesses of all kinds with ransomware attacks. As these attacks become more sophisticated, carrying the potential to effect a wholesale inability to access a firm's entire electronic infrastructure, ransom demands have increased — often reaching eight figures. Because these denial-of-access attacks have been so effective, making ransom payments has become mainstream in corporate America. In this article, partner Marc Elovitz and former Schulte lawyer Brian Daly and Edward Sadtler discuss how managers can increase their level of preparedness for a ransomware attack. Special counsel Kelly Koscuiszka and former Schulte lawyers Jennifer Gordon and Jaclyn Malmed assisted in the preparation of this article.
Related People
Attachments
Related Insights
Alerts
On June 28, 2024, the US Department of the Treasury’s Financial Crimes Enforcement Network (“FinCEN”) issued a notice of proposed rulemaking that would amend existing anti-money laundering/countering the financing of terrorism (“AML/CFT”) program[1] regulations to require that financial institutions establish, implement and maintain effective, risk-based and reasonably designed AML/CFT programs with certain minimum components, including a mandatory risk assessment process (hereinafter, “Proposed Rule”).[2] For purposes of the Proposed Rule, “financial institutions” include: banks; broker dealers; mutual funds; futures commission merchants (“FCMs”) and introducing brokers in commodities (“IB-Cs”); insurance companies; money services businesses (“MSBs”); casinos and card clubs; dealers in precious metals, precious stones or jewels; operators of credit card systems; loan or finance companies; and housing government sponsored enterprises.[3] In addition to establishing minimum risk assessment requirements for these AML/CFT programs, the Proposed Rule would require that financial institutions document each component of their AML/CFT programs and make this documentation available to FinCEN or its designee, which can include the appropriate agency to which FinCEN has delegated examination authority,[4] or the appropriate SRO.[5] The Proposed Rule would also require that these AML/CFT programs be approved and overseen by the financial institution’s board of directors or, if the financial institution does not have a board of directors, an equivalent governing body.
Alerts
On June 28, 2024, the US Department of the Treasury’s Financial Crimes Enforcement Network (“FinCEN”) issued a notice of proposed rulemaking that would amend existing anti-money laundering/countering the financing of terrorism (“AML/CFT”) program[1] regulations to require that financial institutions establish, implement and maintain effective, risk-based and reasonably designed AML/CFT programs with certain minimum components, including a mandatory risk assessment process (hereinafter, “Proposed Rule”).[2] For purposes of the Proposed Rule, “financial institutions” include: banks; broker dealers; mutual funds; futures commission merchants (“FCMs”) and introducing brokers in commodities (“IB-Cs”); insurance companies; money services businesses (“MSBs”); casinos and card clubs; dealers in precious metals, precious stones or jewels; operators of credit card systems; loan or finance companies; and housing government sponsored enterprises.[3] In addition to establishing minimum risk assessment requirements for these AML/CFT programs, the Proposed Rule would require that financial institutions document each component of their AML/CFT programs and make this documentation available to FinCEN or its designee, which can include the appropriate agency to which FinCEN has delegated examination authority,[4] or the appropriate SRO.[5] The Proposed Rule would also require that these AML/CFT programs be approved and overseen by the financial institution’s board of directors or, if the financial institution does not have a board of directors, an equivalent governing body.