On July 21, 2025, the U.S. Department of the Treasury’s Financial Crimes Enforcement Network (“FinCEN”) announced its intention to postpone the effective date of the AML/CFT Rule from January 1, 2026, until January 1, 2028.
Several news sources recently reported that a data breach resulted in 16 billion login credentials being exposed. While this was not a single breach, and rather a compilation of leaked credentials stolen by infostealers, exposed in data breaches, and via credential stuffing attacks, it does reinforce the risk associated with compromised credentials.
On February 20, 2025, the SEC announced the creation of the Cyber and Emerging Technologies Unit (“CETU”), replacing the existing Crypto Assets and Cyber Unit, in an effort to combat cyber-related misconduct and to protect retail investors from bad actors in the technologies space.
The SEC announced on January 17, 2025, that they have filed a total of 200 enforcement actions in the first quarter of fiscal year 2025, including 118 standalone enforcement actions. The Division filed 75 actions in the month of October alone.