Social EngineeringProfessional ServicesProfessional ServicesPhishingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDHighContained

focusIT, Inc

bd_1c71a9b8a3fa1051 · schema v1 · pii pii-v1

Severity

High

Discovered

Aug 2, 2022

Filed

Sep 30, 2022

To disclose

8 weeks

Affected

4,902state residents only

Linked

10 filings

Confidence

69%

Full breach record for focusIT, Inc →

focusIT, Inc. reported a phishing-based cyberattack affecting personal information (name, DOB, address, SSN) of 4,902 Washington residents. The incident occurred between June 1 and August 3, 2022, was discovered on August 2, 2022, and contained swiftly. focusIT notified the FBI and offered 1 year of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d8 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 62 days

discovery → filing · 8 weeks / 59 days

Jun 1, 2022

Begins

Aug 2, 2022

Discovered

Sep 30, 2022

Filed

vs. sector median

10 wks faster

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (9) · sorted by filing gap

Oregon State AGbd_45a661a492b146b52022-09-30Verified
California State AGbd_54d36976270d5b762022-09-30Verified
Maine State AGbd_ebe2aa484d17951c2022-09-30Verified
Indiana State AGbd_0634fa54edfda7e32022-09-29 · +1dVerified

Show 5 more filings ↓up to 3d gap

Massachusetts State AGbd_28bf2140c7ab07672022-09-29 · +1dVerified
New Hampshire State AGbd_55a4b243f663675a2022-09-29 · +1dVerified
Delaware State AGbd_9e053a4f72bbc71f2022-09-29 · +1dVerified
Montana State AGbd_ffe5901a07fbecd32022-09-29 · +1dVerified
South Carolina State AGbd_02967c397059620e2022-10-03 · +3dVerified

Name: focusIT, Inc
norm: focusit
Domain: focusitinc.com

Name: focusIT, Inc
norm: focusit
Domain: focusitinc.com
Industry: Professional Servicesllm

Discovered: Aug 2, 2022
Breach occurred: Jun 1, 2022 – Aug 3, 2022
Undetected for: 62 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 28, 2022
Affected individuals: 4,902state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Regulator citations: working with the appropriate law enforcement and regulatory officials including the FBI
Initial access: phishing_link

During the incident: Working with the appropriate law enforcement and regulatory officials including the FBI
Providing notice and offering free credit monitoring services
Changes made: Offering free credit monitoring services to certain individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(59 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 10 filings · 10 states

View merged incident ↗

Indiana State AGSep 29 · first

Massachusetts State AGSep 29 · first

New Hampshire State AGSep 29 · first

Delaware State AGSep 29 · first

Montana State AGSep 29 · first

Oregon State AG+1d

California State AG+1d

Maine State AG+1d

Washington State AG+1d · this page

South Carolina State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA15471.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 30, 2022
Raw hash: 5cbc97122c492d6f11f2eb583712d0bf9995ad388a362f24a197e50627f35402

Linked disclosures

Regulatory filings (9) · sorted by filing gap

Reporting entityfocusIT, Inc

Victim entityfocusIT, Inc

Incidentdiscovered Aug 2, 2022

Stated responseWorking with the appropriate law enforcement and regulatory officials including the FBI

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com