New York Governor Andrew Cuomo said in a statement on Monday that all credit reporting agencies must register with the state and comply with its cybersecurity rules.

The regulation, ordered in the wake of an breach at Equifax that exposed sensitive data of up to 143 million people, will allow the state to potentially refuse to allow a company to do business with New York's financial institutions, the statement said.