HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
NEXT Financial Group, Inc.
bd_2118830edc84d1ba · schema v1 · pii pii-v1
Full breach record for NEXT Financial Group, Inc. →Next Financial Group, Inc. notified consumers of a May 10, 2023 incident involving unauthorized access to a professional's computer. The breach potentially exposed names, DOBs, SSNs, driver's license numbers, and financial account information. NFG engaged outside cybersecurity specialists, reported to federal law enforcement, and offered complimentary credit monitoring via Experian. The exact scope of affected individuals was undetermined due to data unavailability.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_cc02b0b9a7470ccdNew Hampshire State AGfiled 2023-11-06Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-11-06-next-financial-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Nov 6, 2023
- Raw hash
- f0cdaeadbabf4c30f4fb6d026244c578ba49377348719597c1e428a5feb3d096
Reporting entity
- Name
- NEXT Financial Group, Inc.norm: next financial
Victim entity
- Name
- NEXT Financial Group, Inc.norm: next financial
Incident
- Discovered
- May 10, 2023
- Materiality determined
- —
- Notification sent
- Nov 6, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- reported the event to federal law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(180 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.