A Colorado mobile home company has come to an agreement with the state’s attorney general’s office to pay $25,000 and implement new safety measures after a security breach released more than 15,000 people’s sensitive information.

Over 700 Coloradans were affected in the breach that targeted Impact MHC’s email system beginning in October of 2018 and continuing until July 2019, according to the release. 

Impact MHC, despite learning of the breach, took 10 months to inform their Colorado customers, despite the law requiring notice to happen within 30 days.

“Now more than ever companies must remain vigilant in the digital world,” Colorado Attorney General Phil Weiser said in a release. “A data breach like the one at Impact MHC can put important consumer financial and personal information in the hands of the wrong people and cause significant harm to Coloradans and their families.”

Both parties agreed to a settlement on Wednesday, and Impact MHC will have to pay an additional $30,000 to the attorney general’s office if it does not implement updated security measures such as a comprehensive cybersecurity program, creating a written information disposal police and an incident response plan.