HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
AMERIFIRST FINANCIAL, INC.
bd_11cd4642d8637a6a · schema v1 · pii pii-v1
Full breach record for AMERIFIRST FINANCIAL, INC. →AmeriFirst Financial, Inc. reported a data breach affecting customer loan files. The incident occurred between December 2, 2020, and December 10, 2020, involving unauthorized access to electronic data storage. Exposed data included names, Social Security numbers, bank account numbers, driver's licenses, and passport numbers. AmeriFirst retained a forensic firm, implemented security measures, and provided one year of identity monitoring via Kroll to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_8489331eae39dbc4Oregon State AGfiled 2021-04-15Candidate
- bd_ae2c8877a2cbbe5eMaine State AGfiled 2021-04-15Verified
- bd_bdf6bfeeca0c1b12Montana State AGfiled 2021-04-15Verified
- bd_c26c7fb78fe14237Washington State AGfiled 2021-04-15Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-539984
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 15, 2021
- Raw hash
- 7eff031811bdfeef17ced0378cf1a3f81f97311d5658d912cfa9da9d9130483b
Reporting entity
- Name
- AMERIFIRST FINANCIAL, INC.norm: amerifirst financial
Victim entity
- Name
- AMERIFIRST FINANCIAL, INC.norm: amerifirst financial
Incident
- Discovered
- Apr 12, 2021
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1119 Automated Collection
- Threat actor
- ExternalFinancial
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 3 days(3 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.