Financial Asset Management Systems
bd_07b4ce6a5eefb964 · schema v1 · pii pii-v1
Threat-actor claim — not a regulatory filing
This row is a claim by the ransomware group LockBit 3.x on its public extortion blog. It has not been validated by the victim or any regulator. Treat attribution and counts as the threat actor's assertion until a regulatory filing or victim disclosure corroborates them.
Sanctions caution: LockBit 3.x carries US sanctions exposure — OFAC has designated the group or its operators. Public reporting is permitted (informational-materials exemption, 50 U.S.C. § 1702(b)(3)) — but any payment or material support may violate sanctions. Consult counsel before engaging.
Source: Ransomware.live
Post text · scraped from the leak site
FAMS Recovery Solutions, headquartered in Woodstock, Georgia, and established in 1993, is a debt collection agency. Their services include first-party collections, third-party collections, and skip-tracing & USA
J jump to incidentP pin to compareR raw source
Incident timeline — mostly unverified
? — ?
Breach window unknown
May 26, 2023
Claim posted
—
Corroborated · see linked filings
This record's own dates cannot anchor compliance clocks; see the linked filings.
Claim → filing
—
Compliance clock
Not assessable
Linked disclosures
Why this link?Regulatory filings (10) · sorted by filing gap
- California State AGbd_1464bacc7c9f8c7d2023-09-29 · +126dCandidate
- Indiana State AGbd_2fda00a41105f7422023-09-29 · +126dVerified
- Vermont State AGbd_359d4446a03ee5e92023-09-29 · +126dVerified
- Montana State AGbd_5ac1e084b2eac5732023-09-29 · +126dVerified
Show 6 more filings ↓Show fewer ↑up to 162d gap
- Massachusetts State AGbd_6f740f48d6e205312023-09-29 · +126dVerified by operator
- Maine State AGbd_8d7306e5505060e92023-09-29 · +126dCandidate
- New Hampshire State AGbd_7e40019cbcfdd8a02023-10-02 · +129dVerified
- Illinois State AGbd_7804d30a6f4962512023-01-01 · +145dVerified by operator
- Vermont State AGbd_458d0120807b821e2023-10-31 · +158dVerified
- HHS OCRbd_4c6b923b0ea736472023-11-04 · +162dVerified by operator
Filing propagation · 10 filings · 9 states
View merged incident ↗Pattern: first filing Jan 1 (IL), last Nov 4 (GA) — a 307-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.
Source ceiling
- actor name
- victim claim
- ransom/leak status
- discovery date
- materiality
- notification
- affected count
- confirmed data types
- compliance clock
The ✕ fields stay blank until a regulatory filing or victim disclosure lands.