MalwareRansomwareCapture Stored DataRansom DemandedRansom PaidData EncryptedData ExfiltratedEmployee Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICPIIMediumContained
Faneuil, Inc.
bd_06d0fd77be8a7041 · schema v1 · pii pii-v1
Full breach record for Faneuil, Inc. →Fanueil, Inc. notified Delaware AG of a ransomware attack discovered on August 18, 2021. Attackers accessed and copied employee employment records (names, SSNs, addresses, emails). Fanueil paid the ransom, received confirmation of data destruction, isolated systems, and engaged forensic experts. Affected individuals were offered 24 months of Experian IdentityWorks. No evidence of data misuse was found at the time of notification.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_125d95dc09b67eceCalifornia State AGAPT ABCfiled 2022-02-07(6d gap)Verified
- bd_08fd1bcfc2254b58Delaware State AGfiled 2022-02-08(7d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/02/EXPERIAN_Job39643d01_Faneuil_L01-Gen_SAS_1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 1, 2022
- Raw hash
- a943260949164d36109f7f0c39acf75dbe59b2331ac52c75176c22af160aa147
Reporting entity
- Name
- Faneuil, Inc.norm: faneuil
- Domain
- faneuil.com
Victim entity
- Name
- Faneuil, Inc.norm: faneuil
- Domain
- faneuil.com
Incident
- Discovered
- Aug 18, 2021
- Materiality determined
- —
- Notification sent
- Feb 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICPII
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1119 Automated CollectionT1074 Data Staged
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to and cooperated with law enforcement
Compliance
- Time to disclose
- 24 weeks(167 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.