MalwareRansomwareRansom DemandedRansom PaidData ExfiltratedData EncryptedEmployee Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Faneuil, Inc.
bd_08fd1bcfc2254b58 · schema v1 · pii pii-v1
Full breach record for Faneuil, Inc. →Faneuil, Inc. notified Delaware AG of a ransomware attack discovered on August 18, 2021. Attackers accessed and copied employee records (names, SSNs, addresses, emails) before encrypting systems. Faneuil paid the ransom, confirmed data destruction, isolated systems, engaged forensic experts, and reported to law enforcement. Affected individuals received 24 months of Experian IdentityWorks. No public data release was observed.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_125d95dc09b67eceCalifornia State AGAPT ABCfiled 2022-02-07(1d gap)Verified
- bd_06d0fd77be8a7041Delaware State AGfiled 2022-02-01(7d gap)Candidate
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/02/EXPERIAN_Job39643d01_Faneuil_L01-Gen_SAS_1.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 8, 2022
- Raw hash
- 2423a9ea1d49e8c4872abe9deb16e6b1df92710ba4ecf07a3913fa2655a5f40c
Reporting entity
- Name
- Faneuil, Inc.norm: faneuil
- Domain
- faneuil.com
Victim entity
- Name
- Faneuil, Inc.norm: faneuil
- Domain
- faneuil.com
Incident
- Discovered
- Aug 18, 2021
- Materiality determined
- —
- Notification sent
- Feb 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to and cooperated with law enforcement
Compliance
- Time to disclose
- 25 weeks(174 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.