[…] Regulation and the New York State Attorney General found that they NOT to execute properly data security […]