HackingData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Reel FX, Inc.
bd_25a0b0c551d50153 · schema v1 · pii pii-v1
Full breach record for Reel FX, Inc. →Reel FX, Inc. notified the New Hampshire Attorney General of a data security incident affecting 2 state residents. Unauthorized access occurred between June 4 and June 26, 2022. Affected data included names, addresses, SSNs, and bank account numbers. Reel FX engaged forensic experts, contained the breach, and notified law enforcement (FBI, RCMP). Affected individuals received 12 months of identity monitoring via Kroll.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_0585b674439ab343Montana State AGfiled 2022-10-04Candidate
- bd_1f810385a63d49d6California State AGfiled 2022-10-04Verified
- bd_bf70efa34529024eMaine State AGfiled 2022-10-04Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/reel-fx-20221004.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Oct 4, 2022
- Raw hash
- 1c4de1e858e65edab1d2ccd08ee0457e2c8c3a664fff62b83a8e574f80e464dc
Reporting entity
- Name
- Reel FX, Inc.norm: reel fx
Victim entity
- Name
- Reel FX, Inc.norm: reel fx
Incident
- Discovered
- Jun 26, 2022
- Materiality determined
- —
- Notification sent
- Oct 4, 2022
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney GeneralReported the incident to the Federal Bureau of InvestigationReported the incident to the Canadian Anti-Fraud CentreReported the incident to the Royal Canadian Mounted PoliceReported the incident to the Office of the Privacy Commissioner of Canada
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(100 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.