HackingTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Finn Corporation
bd_32565b70de84c4f5 · schema v1 · pii pii-v1
Full breach record for Finn Corporation →Finn Corporation notified the Maryland Attorney General of a data event affecting approximately 3 Maryland residents. An unauthorized actor accessed the network from Nov 12-13, 2024, potentially exposing names and Social Security numbers. Finn Corp engaged forensic specialists, notified the FBI, and provided 12 months of credit monitoring to affected individuals.
Maryland clock✗ MD AG >90d13 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by dragonforce about this victim predates this filing by 60 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_beeb15853941c908Leak Sitedragonforcefiled 2024-12-14(60d gap)Candidate
Regulatory filings (2) · sorted by filing gap
- bd_3363157a8dceacc6New Hampshire State AGfiled 2025-02-12Verified
- bd_63cf52240b35e2e7Indiana State AGfiled 2025-02-12Verified
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376351.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 12, 2025
- Raw hash
- 96b8cec01aa3bd1f0cd4f1e5f0cffaf61a52da1efee4d4d2028a8f9e7f3315a4
Reporting entity
- Name
- Finn Corporationnorm: finn
- Domain
- finncorp.com
Victim entity
- Name
- Finn Corporationnorm: finn
- Domain
- finncorp.com
Incident
- Discovered
- Nov 13, 2024
- Materiality determined
- —
- Notification sent
- Feb 12, 2025
- Affected individuals
- 3
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified federal law enforcement (FBI)
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- MD AG >90dLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.