HackingProfessional ServicesCustomer Data InvolvedIdentity (basic)Government IDFinancial accountCredentialsPHIHealth (basic)MediumContained

FPI Management

bd_49d8aa1c9cc172bf · schema v1 · pii pii-v1

Severity

Medium

Discovered

Aug 14, 2020

Filed

Apr 15, 2021

To disclose

35 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for FPI Management →3 incidents on file

FPI Management, Inc. experienced a data security incident on August 6, 2020, discovered on August 14, 2020. An unauthorized third party accessed systems containing personal information including names, addresses, SSNs, driver's license numbers, financial account info, online credentials, and medical information. FPI engaged cybersecurity experts, secured systems, and reported to the FBI. Complimentary identity theft protection was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 8 days

discovery → filing · 35 weeks / 244 days

Aug 6, 2020

Begins

Aug 14, 2020

Discovered

Apr 15, 2021

Filed

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Indiana State AGbd_ef3a2b6c0362002c2021-04-15Verified
Massachusetts State AGbd_3495a6f1afac2d172021-04-16 · +1dVerified
Montana State AGbd_5a9851f19a551c3c2021-04-16 · +1dVerified
New Hampshire State AGbd_c98b7038418770b82021-04-16 · +1dVerified

Show 2 more filings ↓up to 13d gap

Maine State AGbd_f07935644acc0a772021-04-16 · +1dVerified by operator
Washington State AGbd_6879a8ce866ccd722021-04-02 · +13dCandidate

Name: FPI
norm: fpi
Domain: fpi.org

Name: FPI Management
norm: fpi management

Discovered: Aug 14, 2020
Breach occurred: Aug 6, 2020
Undetected for: 8 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountCredentialsPHIHealth (basic)
Data elements: Social Security numberDate of birthMedical information
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Reported this incident to the Federal Bureau of Investigation

During the incident: Took immediate steps to secure its systems prior to restoration
Retained independent cybersecurity experts to conduct an investigation
Implemented additional security measures to further harden its digital environment
Reported this incident to the Federal Bureau of Investigation
Offering complimentary identity theft protection services through Experian IdentityWorks
Changes made: Implemented additional security measures to further harden its digital environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 35 weeks(244 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Washington State AGApr 2 · first

Indiana State AG+13d

California State AG+13d · this page

Massachusetts State AG+14d

Montana State AG+14d

New Hampshire State AG+14d

Maine State AG+14d

Pattern: first filing Apr 2 (WA), last Apr 16 (ME) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-539988
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 15, 2021
Raw hash: a77f3989c9b8b2b3aa13c1b77bb39175d4865c0454496ed2cac3f996a06f862c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityFPI

Victim entityFPI Management

Incidentdiscovered Aug 14, 2020

Stated responseTook immediate steps to secure its systems prior to restoration

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov