“DOJ’s $2 Million Honeywell Settlement Under the Civil Cyber-Fraud Initiative: What Compliance Failures Mean for Defense Contractors

Key Takeaways

  • DOJ used the FCA to settle with Honeywell Aerospace Inc. for $ 2,042,518 over allegations that a Honeywell business unit submitted claims for payment under a DoW contract while failing to comply with NIST SP 800-171 cybersecurity requirements incorporated through DFARS 252.204-7012, reinforcing that cybersecurity compliance failures can create significant FCA exposure for defense contractors.
  • The settlement arose from a 2022 qui tam whistleblower action filed by a former Honeywell employee, and DOJ reported a record
… Read the rest

FTC Finalizes Order with GoDaddy over Data Security Failures

The Federal Trade Commission has finalized an order with GoDaddy settling allegations that the webhosting provider misled consumers by failing to implement data security protections, which led to several data breaches.

The FTC alleged in January 2025 that despite claiming it provides “award-winning security,”  GoDaddy failed to implement standard data security tools and practices to protect customers’ websites and data. For example, it failed to use multi-factor authentication, monitor for security threats, and secure connections to its consumer data. These failures … Read the rest