Multistate

  • A coalition of 40 attorneys general filed a notice in the bankruptcy proceedings of Character Technologies, Inc. to raise concerns about the company’s privacy and safety practices. The company was responsible for an AI chatbot platform, Character.AI, that was sued in 2024 for wrongful death attributed to the platform’s emotional impact on a child. The filing highlighted the significant volume of sensitive user data held by Character.AI, including private chatbot conversations involving both adults and children.
  • A coalition of 18 attorneys general secured a $664 million settlement with Snap Finance, a consumer financial services company offering lease-to-own agreements through merchant partners. The settlement also requires Snap Finance to change its business practices related to advertising restrictions, disclosure and transparency, servicing protections, lease terminations, and merchant training and compliance.
  • New York Attorney General Letitia James and Connecticut Attorney General William Tong jointly announced a $2.7 million settlement with Boston Children’s Health Physicians (BCHP), a New York-based pediatric health network, and XTIUM, an IT management company that provided network security services to BCHP. The settlement resolves allegations that the companies failed to protect the private medical information of hundreds of thousands of patients. BCHP and XTIUM must pay a $2.1 million penalty to New York and $540,000 to Connecticut, with an additional $1.3 million payable to the two states if either company violates the terms of the agreement. Both companies are also required to implement strengthened cybersecurity policies including a comprehensive information security program, data inventory controls, enhanced authentication procedures, and improved threat detection and response capabilities.

Arizona

  • Attorney General Kris Mayes filed a Petition for Enforcement of Civil Investigative Demands regarding an investigation of Roblox Corporation for potential violations of the Arizona Consumer Fraud Act, seeking a court order compelling Roblox to immediately produce documents and data relevant to the safety of Arizona children on the platform. According to the petition, Roblox has failed to provide complete responses to requests for information to evaluate whether the company has failed to take adequate precautions to protect Arizona minors from sexual exploitation, violent content, and other age-inappropriate material on the platform, and whether it has misrepresented those safety issues to Arizona parents and consumers.

California

  • Attorney General Rob Bonta announced a $6 million settlement with Chrome Holding Co., formerly known as 23andMe, regarding the company’s alleged failure to protect its customers’ personal information and genetic data, resulting in a 2023 data breach. As part of the settlement, affected consumers retain the right to request deletion of their personal data and destruction of their biological samples regardless of who now owns the company.
  • Attorney General Bonta obtained a $500,000 settlement with Fidelity Digital Asset Services (FDAS), the cryptocurrency subsidiary of Fidelity Investments, resolving the company’s alleged violations of the commodity contract ban under the California Commodity Law by restricting customers’ ability to withdraw certain cryptocurrencies. The settlement requires FDAS to permit its California customers to transfer their cryptocurrency assets in accordance with all applicable laws and regulations.

Connecticut

  • Attorney General William Tong secured a $625,000 settlement with Frontier Communications Parent Inc. regarding an April 2024 data breach in which a threat actor used compromised employee and vendor credentials to access Frontier’s internal IT systems and exfiltrate unencrypted personal information—including Social Security numbers—of 58,841 Connecticut residents, and subsequently offered the stolen data for sale on the dark web. The investigation identified multiple security failings by Frontier relating to identity and access management, network segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention. The settlement includes injunctive terms requiring Frontier to comply with the Connecticut Unfair Trade Practices Act, the Connecticut Data Privacy Act, and Connecticut’s data Safeguards Law, and to implement a comprehensive information security program, enhanced employee training, an incident response plan, and a third-party security assessment within one year.

Florida

  • Attorney General James Uthmeier sent a civil investigative subpoena to Performance Food Group, Inc. as part of an expanded investigation into the presence of potassium bromate—a substance classified by the International Agency for Research on Cancer as possibly carcinogenic to humans—in Florida’s food supply. Performance Food Group is identified in the investigation as among the top purchasers of bromated flour, and the subpoena requires the company to produce records from its Miami and Orlando distribution centers identifying which food products containing specified bromated flours were sold, to whom, and what disclosures, if any, were made to purchasers. The subpoena covers products containing Pillsbury Potentate High Gluten Flour, Pillsbury Best Bakers Patent Flour, Gold Medal All Aces Bakery Flour, and Gold Medal Superlative Bakers Flour, and requires production of materials by November 6, 2026.

Massachusetts

  • Attorney General Andrea Campbell recovered $1 million from former medical transportation provider Transformative Healthcare, LLC and its former subsidiaries—Lifeline Ambulance Services, LLC and Lifeline Healthcare Solutions, LLC (together, Lifeline) and Fallon Service, LLC and Fallon Emergency Medical Services, LLC (together, Fallon)—to resolve allegations that the companies submitted false claims to the state’s Medicaid program and failed to safeguard sensitive patient and employee data. The AGO’s investigation found that Fallon and Lifeline allegedly “upcoded” their MassHealth claims by billing for more expensive levels of service than were actually provided. Separately, the AGO alleges that Transformative failed to maintain a written information security program as required by Massachusetts Data Security regulations and the Health Insurance Portability and Accountability Act (HIPAA), in connection with a data breach that occurred between February and April 2023.

Missouri

  • Attorney General Catherine Hanaway expanded a statewide investigation into 7-OH and other synthetic kratom products by issuing nine new Civil Investigative Demands (CIDs) to determine whether additional companies manufactured, distributed, or sold products containing compounds recently designated as Schedule I controlled substances under federal and Missouri law. The investigation is targeting potential violations of the Missouri Merchandising Practices Act and other applicable state and federal laws. Recipients of the new CIDs include KC Distro LLC, Main Street Traders LLC (d/b/a Main Street Smoke Shop), Spark Wholesale LLC (d/b/a Spark Tobacco & Vape), Cloud Wholesale LLC, S&A Wholesale Inc., JSST Enterprises LLC (d/b/a Ultimate Vapor), AK Wholesale Inc., Karmic Genesis LLC, and Vapor Maven MO LLC. In addition to the CIDs, Attorney General Hanaway issued cease-and-desist orders to KC Distro and Karmic Genesis demanding that those companies immediately stop selling 7-OH products.

New York

  • Attorney General Letitia James announced a $1.875 million settlement from DolGen New York, LLC and Dollar General Corporation after an OAG investigation found that Dollar General routinely overcharged customers at its New York stores by charging more than the lowest advertised, posted, or shelf price. The investigation reviewed more than 900 Weights and Measures inspection reports and found that 43 percent documented price accuracy failures above 2 percent in 2021–2023; a separate secret shopper investigation at 11 locations in Western New York found that investigators were overcharged for approximately 14 percent of items purchased. Under the settlement, Dollar General will donate $1.875 million worth of food items and personal goods to Foodlink, a Rochester-based nonprofit, and will also implement comprehensive pricing accuracy reforms, including honoring the lowest advertised price, providing staff training, reformatting receipts, and engaging an independent auditor to conduct unannounced pricing audits at every New York Dollar General store twice per fiscal year.

Pennsylvania

  • Attorney General Dave Sunday announced a complaint and proposed settlement filed in federal court in connection with the proposed acquisition of Suit-Kote Corporation by Colas, Inc. — two of the largest producers of asphalt emulsions and pavement preservation services in the Northeast — alleging that the transaction as proposed would harm competition and lead to higher prices, lower quality, and less favorable terms for asphalt emulsions and pavement preservation services used by PennDOT and Pennsylvania municipalities. Colas and Suit-Kote agreed to divest four facilities — three Suit-Kote facilities in New York (Belmont, Buffalo, and Jamestown) and one Colas facility in Pennsylvania (Bloomsburg) — and to invest up to $10 million to build out a Bloomsburg facility with an emulsion mill and asphalt emulsion storage, and a Belmont facility with pavement preservation equipment.
  • Attorney General Sunday filed a lawsuit in Allegheny County Court against two western Pennsylvania men, Sean Walters and Charles Spence, and several affiliated business entities, alleging violations of the Pennsylvania Unfair Trade Practices Law and the Pennsylvania Loan Interest and Protection Law in connection with a rent-to-own home scheme in which the defendants allegedly “purchased” homes by agreeing to take over existing mortgage payments and then “sold” those homes to unsuspecting buyers under land installment contracts without disclosing that the defendants did not hold title to the properties. According to the complaint, the defendants targeted homeowners who needed to sell quickly and first-time buyers unfamiliar with real estate transactions; the defendants later defaulted on the underlying mortgages, damaging the credit of sellers and triggering foreclosure and eviction proceedings against buyers who believed they were on a path to homeownership. The lawsuit seeks restitution for harmed consumers as well as civil penalties and related costs, and the court granted the AGO’s request for an ex parte preliminary injunction requiring the defendants to keep current on mortgage and homeowners’ association payments for affected properties, halting eviction proceedings, and prohibiting further encumbering of those properties. The named business defendants include CSW Financial LLC, W Group Holdings LLC, RS Capital LLC, Marlin Holdings LLC, Alpha Realty Investment LLC, and NSX Property Group LLC.

Vermont

  • Attorney General Charity Clark secured a settlement with UniFirst, a company that provides workplace uniforms, protective clothing, and facility services, resolving an investigation into the company’s alleged failure to comply with Vermont’s automatic renewal law. The law requires businesses to provide conspicuous disclosure, advance notice, and an opportunity to cancel before any contract spanning more than one year is automatically renewed. The settlement requires that UniFirst remove automatic renewal clauses from its contracts with Vermont customers and provide notice to all existing customers of the change, and that UniFirst pay $60,000 to the State of Vermont.

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from October 8-14, 2026:

Multistate

  • A bipartisan coalition of 45 state attorneys general sought court approval of three settlements with Ascend Laboratories, Citron Pharma, and Mayne Pharma, resolving allegations that the generic drug manufacturers engaged in a widespread, long-running conspiracy to artificially inflate and manipulate prices, reduce competition, and unreasonably restrain trade with regard to numerous generic prescription drugs in violation of state antitrust laws. The settlements focus primarily on injunctive relief, requiring each company to implement internal reforms to ensure fair competition and antitrust compliance going forward. The action is part of the broader, ongoing multistate generic drug price-fixing litigation led by the Connecticut Attorney General’s Office, in which states have now secured settlements totaling approximately $496.5 million from multiple manufacturers, with the first trial in the litigation scheduled for February 2027.

Connecticut

  • Connecticut Attorney General Tong announced a $625,000 settlement with Frontier Communications Parent Inc., resolving an investigation into an April 2024 data breach in which a threat actor used compromised employee and vendor credentials to gain unauthorized access to Frontier’s internal IT systems and exfiltrate unencrypted personal information—including Social Security numbers—of 58,841 Connecticut residents, later offering the stolen data for sale on the dark web. The investigation identified multiple security failings by Frontier, including deficiencies in identity and access management, segmentation, logging and monitoring, encryption, incident response, training, and data loss prevention. In addition to the $625,000 civil penalty, the settlement requires Frontier to implement a comprehensive information security program with CEO-level reporting requirements, mandatory employee training, a detailed incident response plan, robust technical safeguards across encryption, access controls, password management, multi-factor authentication, penetration testing, and intrusion detection, and a third-party security assessment within one year.

Florida

  • Florida Attorney General Uthmeier filed a lawsuit against Discord in Florida state court under the Florida Deceptive and Unfair Trade Practices Act, Florida’s law protecting children in online spaces (§ 501.1735), and common law claims of negligence, negligent misrepresentation, and public nuisance, alleging that Discord marketed itself to Florida families as a platform where “safety is at the core of everything we do” while failing to implement meaningful age verification, allowing adults to pose as minors using nothing more than an email address and a self-reported birthday, and enabling strangers to send unsolicited friend requests and direct messages to children by default. The complaint alleges that Discord had approximately 2.7 million monthly active U.S. users under the age of 18 as of February 2024, that its content moderation practices failed to scan all private chats for rule violations, and that the platform has been repeatedly implicated in documented cases of child sexual exploitation and predatory conduct against Florida minors. The Attorney General seeks civil penalties of up to $10,000 per willful FDUTPA violation, up to $150,000 per knowing child privacy violation under § 501.1735, restitution, disgorgement, damages, and a permanent injunction requiring real age verification and prohibiting the collection of children’s data without parental consent.

Illinois

  • Illinois Attorney General Raoul announced a $1.9 million settlement with Equinox Holdings, Inc. resolving an investigation into the luxury fitness company’s violations of the Illinois Freedom to Work Act, which prohibits the use of non-competition clauses in employment contracts for certain lower-earning workers. The investigation found that Equinox violated the Act hundreds of times between 2022 and 2025 by imposing illegal non-competition clauses in the contracts of more than 300 of its lowest-earning employees, and further failed to provide required notice of workers’ right to consult with counsel before signing or sufficient time to review their contracts. Under the settlement, Equinox will pay $990,000 in restitution to affected employees and a $910,000 civil penalty, bring all current contracts into compliance with the Illinois Freedom to Work Act within 21 days, and implement annual training for managerial staff on the Act’s requirements.

New York

  • New York Attorney General James secured $1.875 million in food and personal items from DolGen New York, LLC and Dollar General Corporation, resolving an investigation finding that Dollar General routinely overcharged customers at its New York store locations by charging prices higher than those advertised on shelf tags, digital and print ads, and digital coupons. An OAG review of more than 900 Weights and Measures inspection reports found that 43% documented price accuracy failures above the 2% threshold between 2021 and 2023, and a secret shopper investigation across 11 Western New York locations found that investigators were overcharged on approximately 14% of items purchased. The $1.875 million civil penalty will be donated as food and personal goods to Foodlink, a Rochester-based nonprofit, and the settlement further requires Dollar General to honor the lowest advertised price at all New York locations, allocate staff to maintain pricing accuracy, reformat receipts to clearly display discounts and savings, engage an independent auditor to conduct unannounced pricing audits of every New York store twice per fiscal year, and address all pricing discrepancies discovered by auditors or Weights and Measures inspections within 24 hours.

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from October 1-7, 2026:

Multistate

  • A coalition of 21 state attorneys general and additional local governmental entities sued the National Highway Traffic Safety Administration (“NHTSA”), challenging the agency’s final rule reducing corporate average fuel economy (“CAFE”) standards for new vehicles. Under the final rule, vehicle manufacturers are required to achieve an average fuel efficiency of 34.9 miles per gallon by 2031, a reduction from the previously established goal of over 50 miles per gallon. The coalition argues that CAFE standards have historically lowered costs for American consumers by driving improvements in vehicle fuel efficiency and have reduced gas prices.

Texas

  • Attorney General Paxton secured a $7.5 million settlement with Tris Pharmaceuticals (“Tris”), a pharmaceutical company, and its CEO, Ketan Mehta. The settlement agreement resolves claims that Tris misrepresented the efficacy of its attention-deficit/hyperactivity disorder (“ADHD”) drug marketed for children, in violation of the Texas Medicaid Fraud Prevention Act. Tris allegedly directed its sales representatives to make misleading claims to physicians, asserting that the drug acted quicker than competing products and offered other unsubstantiated benefits to children. The judgment requires Tris to pay $7.5 million to the State of Texas.

Iowa

  • Attorney General Bird sued ADI Global Distribution Inc. (“ADI”), a distributor of video surveillance products, for alleged violations of the Iowa Consumer Fraud Act. The petition alleges that ADI sold security cameras to consumers that were manufactured by two China-based entities identified by the Federal Communications Commission to pose a national security risk, while concealing the true origin of the products and the manufacturers’ affiliations. The petition further alleges that ADI, at times, altered product labels to obscure the cameras’ origins, and that none of the accompanying documentation informed consumers of the associated data-security vulnerabilities or of their presence on U.S. government lists. The petition seeks monetary penalties of up to $40,000 per violation, and injunctive relief.

Florida

  • Attorney General Uthmeier filed a motion for a temporary injunction against Meta Platforms, Inc. and Instagram, LLC (“Meta”) in the Sixth Circuit, for alleged violations of the Florida Deceptive and Unfair Trade Practices Act. The motion argues that Meta deliberately designed addictive features to exploit the psychological vulnerabilities of users under the age of 18. The motion seeks to require Meta to: cease making deceptive statements and omissions about its platforms; implement age-verification measures and remove all Florida users under the age of 14, or, if those measures cannot be implemented within 30 days, cease providing users under the age of 18 access to the platforms in Florida entirely; and modify its platforms to reduce addictive and harmful use by teen users.

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from September 24-30, 2026:

Multistate

  • A bipartisan coalition of 26 attorneys general sent a letter to congressional leaders urging Congress to establish a federal framework for overseeing artificial intelligence development and to protect state authority to regulate AI by prohibiting federal preemption of state laws. The coalition outlined several core principles it believes federal AI legislation must address, including: mandating safety testing and performance standards; requiring transparent and uniform incident reporting with publicly available findings; ensuring that AI safety infrastructure and leadership operate independently of commercial incentives; pursuing international coordination to manage the pace of AI advancement and prevent the emergence of uncontrollable superintelligence; and expressly preserving the authority of state officials to enforce both federal and state AI protections.
Continue Reading State AG News: AI Regulation, Data Protection, Food Safety (September 24-30, 2026)

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from September 18-23, 2026:

Multistate

  • A bipartisan coalition of 41 attorneys general announced a $694 million settlement with Credit Acceptance Corporation (CAC), one of the nation’s largest subprime auto lenders. CAC allegedly provided loans it knew or should have known that consumers could not afford and allowed unlawful “packing” of Vehicle Service Contracts (VSC) and Guaranteed Asset Protection (GAP) products onto consumer auto loans. The settlement provides $60 million in cash restitution for consumers who received particularly risky loans, $388 million in debt relief for consumers whose vehicles were repossessed, and $246 million in debt relief to allow consumers to keep their vehicles, plus $15 million paid to the states. CAC will also be required to provide pre-loan risk disclosures, institute a seven-year vehicle price cap of 109% of retail book value, implement off-ramps for quickly failing loans, and establish enhanced dealer monitoring.
Continue Reading State AG News: Consumer Protection, Settlements, Federal Regulation (September 18-23, 2026)

Register now to join Crowell’s State AG team as they kick off a two-part webinar series examining the 2026 State Attorney General elections and what they mean for businesses operating across the United States.

Part One: Mid-Cycle Check-In: The AG Races to Watch

Wednesday, October 7, 2026 | 12:00 to 1:00 p.m. ET

This session will provide a timely look at the Attorney General races to watch, key primary election results, emerging enforcement priorities, and how election outcomes could shape multistate investigations, consumer protection initiatives, and federal-state enforcement efforts in the years ahead.

Continue Reading Register Now! The Future of State Enforcement: Insights from the 2026 AG Elections

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from September 10-17, 2026:

Multistate

  • A coalition of 21 attorneys general filed two lawsuits to protect endangered and threatened species. The suits allege that new rules undermine essential protections for wildlife under the Endangered Species Act.
  • A bipartisan coalition of 49 attorneys general urged the Federal Communications Commission to strengthen its “Know Your Upstream Provider” (KYUP) requirements to help prevent scammers from using U.S. phone networks to make unlawful robocalls. KYUP rules require voice service providers to take steps to not regularly pass through unlawful calls.
Continue Reading State AG News: Deceptive Practices, Consumer Fraud, Environmental Policy (September 10-17, 2026)

In a recently published Law360 article, Crowell attorneys Stacey Geis, Juge Gregg, and Emily Werkmann examine the rapidly evolving legal landscape surrounding state packaging and recycling laws, analyzing the mounting wave of constitutional challenges to extended producer responsibility programs now enacted across seven states and the significant compliance, litigation, and strategic implications for companies navigating this uncertainty. Click here to read the full article.

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from September 3-9, 2026:

Multistate

  • A multistate coalition of 22 attorneys general, co-led by Illinois Attorney General Raoul and the attorneys general of California, Connecticut, Maryland, and Massachusetts, filed suit challenging a final rule issued by the U.S. Department of Health and Human Services prohibiting federal Medicaid and CHIP reimbursement for gender-affirming care for beneficiaries under ages 18 and 19, respectively, while continuing to cover the same treatments when provided to non-transgender youth. The coalition argues that since the creation of Medicaid and CHIP in the 1960s, Congress has reserved to states the authority to determine which services are covered under their programs, and that HHS and the Centers for Medicare & Medicaid Services lack statutory authority to categorically exclude medically necessary services from reimbursement based solely on the patient’s transgender status. The complaint alleges violations of the Administrative Procedure Act and the Spending Clause of the U.S. Constitution. The rule is set to take effect on October 13, 2026.
Continue Reading State AG News: Consumer Protection, Healthcare, Voting (September 3-9, 2026)

Each week, Crowell & Moring’s State Attorneys General team highlights significant actions that State AGs have taken. See our State Attorneys General page for more insights. Below are the updates from August 28-September 2, 2026:

Multistate Coalition

  • A multistate coalition of 51 attorneys general issued a proposed settlement with Meta Platforms, Inc. (“Meta”) resolving the coalition’s lawsuit against the company for its alleged deployment of harmful features that create compulsive behavior in children. The settlement will require Meta to pay $17 billion to the states over ten years. It also contains injunctive terms requiring Meta to implement child safety measures, including restrictions on daily use of social media for those under 18 and enhanced reporting requirements.
Continue Reading State AG News: Child Safety, Social Media, Labor and Employment (August 28-September 2, 2026)