HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Reel FX, Inc.
bd_1f810385a63d49d6 · schema v1 · pii pii-v1
Full breach record for Reel FX, Inc. →Reel FX, Inc. reported a data security incident to the California Attorney General's office. An unknown actor gained unauthorized access to the Reel FX network between June 4, 2022, and June 26, 2022. The incident involved the exfiltration of personal information, including names, contact details, dates of birth, Social Security Numbers, and bank account/routing numbers. Reel FX engaged forensic experts, contained the breach, and notified law enforcement agencies including the FBI and RCMP. Affected individuals were offered 12 months of identity monitoring services.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0585b674439ab343Montana State AGfiled 2022-10-04Candidate
- bd_25a0b0c551d50153New Hampshire State AGfiled 2022-10-04Verified
- bd_bf70efa34529024eMaine State AGfiled 2022-10-04Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-557878
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 4, 2022
- Raw hash
- bf73e7abae812e7ce71a9e118a07488f3772ec9541bdd1d512481beda27cb2fd
Reporting entity
- Name
- Reel FX, Inc.norm: reel fx
Victim entity
- Name
- Reel FX, Inc.norm: reel fx
Incident
- Discovered
- Jun 26, 2022
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Reported the incident to the Federal Bureau of InvestigationReported the incident to the Canadian Anti-Fraud CentreReported the incident to the Royal Canadian Mounted PoliceReported the incident to the Office of the Privacy Commissioner of Canada
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.