Municipal governments get 72 hours to report a hack, and 24 hours to report ransom payments
New York Gov. Kathy Hochul signed legislation Friday that requires local governments in the state to begin reporting cyberattacks on their networks.
The new law orders municipalities and public authorities to notify the state’s Department of Homeland Security and Emergency Services within 72 hours of a hack. It also obliges these organizations to report any ransom payments made to hackers within 24 hours and mandates security awareness training for government employees in New York.
“Requiring timely incident reporting and providing annual cybersecurity training for government employees will build a stronger digital shield for every community across the state and ensure they get the support they need when it matters most,” Hochul said following a meeting with local officials across the state to discuss security concerns stemming from conflict in the Middle East.
The Wall Street Journal
By James Rundle
June 27, 2025