Missouri

Under Missouri Revised Statutes § 407.1500(4), the state’s Attorney General has exclusive authority to bring an action to obtain actual damages for a willful and knowing violation of the data breach disclosure requirements—the penalty may be up to $150,000 per breach of the security of the system or series of breaches of a similar nature that are discovered in a single investigation.