HackingStolen CredentialsCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICMediumContained
AMERICAN FINANCIAL RESOURCES, INC.
bd_44ef18fe7ecaf2e3 · schema v1 · pii pii-v1
Full breach record for AMERICAN FINANCIAL RESOURCES, INC. →American Financial Resources, Inc. notified the New Hampshire Attorney General of a cybersecurity incident involving unauthorized access to customer files between December 6 and 20, 2021. The breach affected 954 New Hampshire residents, exposing names, Social Security numbers, and some driver's license numbers. AFR secured systems, notified law enforcement, and began mailing notifications on March 11, 2022, offering one year of Kroll identity monitoring.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_ad37ba6575f26947California State AGfiled 2022-03-11Candidate
- bd_ae1bcd2b96d72dd2Delaware State AGfiled 2022-03-11Verified
- bd_b7bfeb2eda20b1beWashington State AGfiled 2022-03-11Verified
- bd_c6ae3d9572dbc582Oregon State AGfiled 2022-03-11Verified
Show 1 more filing ↓Show fewer ↑
- bd_ff196c82f63908aeMontana State AGfiled 2022-03-11Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/american-financial-resources-20220311.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2022
- Raw hash
- 45ed9104e8dd2237f498f18af54c1f885ccda38279d97e441551ba34337b9ef5
Reporting entity
- Name
- AMERICAN FINANCIAL RESOURCES, INC.norm: american financial resources
Victim entity
- Name
- AMERICAN FINANCIAL RESOURCES, INC.norm: american financial resources
Incident
- Discovered
- Dec 20, 2021
- Materiality determined
- —
- Notification sent
- Mar 11, 2022
- Affected individuals
- 954
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 12 weeks(81 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.