Preloader Image

Governor Hochul announced that new legislation aimed at strengthening cybersecurity across New York is now in effect. The measure, known as S.7672A/A.6769A, was first introduced in her 2025 State of the State address and mandates that municipal corporations and public authorities report cybersecurity incidents within 72 hours and ransomware payments within 24 hours to the New York State Division of Homeland Security and Emergency Services (DHSES).

Governor Hochul said,

This legislation strengthens our response and provides our state’s Department of Homeland Security and Emergency Services the necessary information to handle reports of attacks and keep New Yorkers safe.

The legislation also requires victims of ransomware to provide details about the payment, including the amount, justification, and legal diligence, within 30 days. This initiative aims to enhance the state’s ability to address cybersecurity threats and protect critical infrastructure.

Jackie Bray, Commissioner of the New York State Division of Homeland Security and Emergency Services, said,

New York State is leading the way in cybersecurity threat and ransomware reporting.

The legislation, signed by Governor Hochul on June 27, also includes annual cybersecurity awareness training for government employees and sets data protection standards for state-maintained information systems.

Colin Ahern, New York State Chief Cyber Officer, praised the legislation, stating,

New York is making a clear statement that we are stronger together, enabling coordinated response and information sharing, and serving as a blueprint for the nation.

Dru Rai, New York State Chief Information Officer, emphasized the importance of the legislation, saying,

Under Governor Hochul’s leadership, New York is showing the rest of the nation how to skillfully and thoroughly enhance the cybersecurity posture of state agencies, local governments, corporations, and public authorities.

State Senator Monica R. Martinez highlighted the bill’s significance, noting,

This bill gives municipalities the structure, support, and accountability they need to protect residents and taxpayers from prolonged disruption in the event of a cyberattack.

State Senator Kristen Gonzalez and Assemblymember Billy D. Jones also expressed their support, underscoring the necessity of the legislation in an increasingly digital world.