HackingStolen CredentialsData ExfiltratedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Financial Asset Management Systems
bd_359d4446a03ee5e9 · schema v1 · pii pii-v1
Full breach record for Financial Asset Management Systems →Financial Asset Management Systems (FAMS) notified consumers of a March 31, 2023 incident where an unauthorized party acquired name and Social Security numbers from its network. FAMS reported the incident to law enforcement, engaged computer specialists, and provided complimentary credit monitoring and identity protection services to affected individuals.
Vermont clock✗ VT AG >45 bday26 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 125 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_458d0120807b821eVermont State AGfiled 2023-10-31(32d gap)Verified
- bd_4c6b923b0ea73647HHS OCRfiled 2023-11-04(36d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-09-29-financial-asset-management-systems-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2023
- Raw hash
- f286f2ba06fdbe3602a877e94484dfeec4df6450c1857fa7af8361a2728bd627
Reporting entity
- Name
- Financial Asset Management Systemsnorm: financial asset management
- Domain
- fams.net
Victim entity
- Name
- Financial Asset Management Systemsnorm: financial asset management
- Domain
- fams.net
Incident
- Discovered
- Mar 31, 2023
- Materiality determined
- —
- Notification sent
- Sep 29, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 26 weeks(182 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.