HackingData ExfiltratedCustomer Data InvolvedPIILowContained

FXI

bd_3f5362ffe81da5e8 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Jul 20, 2023

To disclose

—

Affected · nationwide

87 in this filing

Linked

3 filings

Confidence

66%

Full breach record for FXI →

FXI, Inc. notified New Hampshire residents of unauthorized access to its systems between June 17 and June 23, 2023. The investigation determined that certain information was acquired without authorization. A total of 8 individuals were affected, including 7 New Hampshire residents and 1 Rhode Island resident. FXI engaged third-party forensic specialists, notified federal law enforcement, and implemented additional security safeguards. Credit monitoring services were provided to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 17, 2023

Begins

Jul 20, 2023

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_62b3935e5083424c2023-07-20Verified
Massachusetts State AGbd_801eb2c37e2b33702023-07-20Verified

Name: FXI
norm: fxi
Domain: fxi.com

Name: FXI
norm: fxi
Domain: fxi.com

Discovered: —
Breach occurred: Jun 17, 2023 – Jun 23, 2023
Materiality determined: —
Notification sent: Jul 20, 2023
Affected individuals: 8state + nationwide
Data types: PII
Attack vector: Unknown
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified federal law enforcementProviding written notice of this incident to relevant state regulators as required

During the incident: Launched an investigation with the assistance of third-party forensic specialists
Notified federal law enforcement regarding the event
Implemented additional safeguards to further secure its systems
Providing access to credit monitoring services for individuals whose personal information was affected by this incident, at no cost to these individuals
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing individuals with information on how to place a fraud alert and security freeze on one’s credit file
Providing written notice of this incident to relevant state regulators as required
Changes made: Implement additional safeguards to further secure its systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGJul 20 · first

Massachusetts State AGJul 20 · first

New Hampshire State AGJul 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fxi-20230720.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 20, 2023
Raw hash: f0742501900ec323348764acb3d1de326fa15ce2af69296c0868c7551f1d061e

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFXI

Victim entityFXI

IncidentUnknown

Stated responseLaunched an investigation with the assistance of third-party forensic specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov