HackingIDENTITY_BASICFINANCIAL_ACCOUNTLowContained
Key Financial Services
bd_4850d536a0e5448f · schema v1 · pii pii-v1
Full breach record for Key Financial Services →Key Financial, Inc. notified the New Hampshire Attorney General of a security incident involving unauthorized access to an employee's email account on April 2, 2021. The breach affected two New Hampshire residents, exposing names and financial account information. Key Financial secured the accounts, engaged a forensic firm, and notified the affected individuals on September 22, 2021.
This filing is one of 2 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (1) · sorted by filing gap
- bd_5aae735d69c8389bMaine State AGfiled 2021-09-22(1d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/key-financial-20210922.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 21, 2021
- Raw hash
- fedcc5a5ea61e264770ee65278ee8712772c4d52c34cb7d6c9add624f66960dd
Reporting entity
- Name
- Key Financial Servicesnorm: key financial
- Domain
- keyfinancial.com
Victim entity
- Name
- Key Financial Servicesnorm: key financial
- Domain
- keyfinancial.com
Incident
- Discovered
- Apr 2, 2021
- Materiality determined
- —
- Notification sent
- Sep 22, 2021
- Affected individuals
- 2
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 25 weeks(172 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.