Flagship Financial
bd_0b597037ad61d1d8 · schema v1 · pii pii-v1
Full breach record for Flagship Financial →FlagShip Facility Services, Inc. reported the theft of a company-owned laptop containing employee I-9 forms and U.S. passport images. The incident was discovered on December 5, 2017, when the laptop was found missing from a secure facility in Menlo Park, California. The laptop contained government-issued ID information (passports) and employment application data for current and former employees. No financial or credit information was involved. The company engaged law enforcement and third-party forensics, and offered one year of identity protection services to affected individuals.
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-132093
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 5, 2018
- Raw hash
- 4cecf8a9aed10a7fc40eaeb4bd2dd156b6a7055705b00419e574196f66972797
Reporting entity
- Name
- Flagship Financialnorm: flagship financial
- Domain
- flagshipfinancial.com
Victim entity
- Name
- Flagship Financialnorm: flagship financial
- Domain
- flagshipfinancial.com
Incident
- Discovered
- Dec 5, 2017
- Materiality determined
- —
- Notification sent
- Jan 5, 2018
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASICEMPLOYMENT
- Attack vector
- Unknown
- MITRE ATT&CK
- T1052 Exfiltration Over Physical Medium
- Regulator citations
- Worked closely with law enforcement
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- CA 60-day OK · 31d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
- Clock breakdown
Statute Window Elapsed Threshold Status California Discovered: Dec 5, 2017→ Notified: Jan 5, 201831d 60 days (analyst band, pre-2026 discoveries) CA 60-day OK
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.