HackingTechnologyInformationStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)CredentialsPIILowContained

FOXIT SOFTWARE INCORPORATED

bd_5048c4262f5bf6e0 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Sep 3, 2019

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

66%

Full breach record for FOXIT SOFTWARE INCORPORATED →

Foxit Software reported a cybersecurity incident involving unauthorized access to its 'My Account' user account data. The breach exposed user names, email addresses, company names, phone numbers, passwords, and IP addresses. No credit card or payment information was exposed. Foxit invalidated passwords, engaged forensic investigators, and notified law enforcement.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Sep 3, 2019

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Delaware State AGbd_1ef6a49826086c6c2019-08-30 · +4dVerified

Name: FOXIT SOFTWARE INCORPORATED
norm: foxit software
Domain: foxitsoftware.com

Name: FOXIT SOFTWARE INCORPORATED
norm: foxit software
Domain: foxitsoftware.com
Industry: Technologyllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)CredentialsPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: informed and cooperates with law enforcement agencies and data protection authorities
Initial access: valid_credentials

During the incident: Launched a digital forensics investigation
Partnered with a security management firm
Invalidated the account passwords for all potentially impacted accounts
Informed all customers whose information may be at risk of having been leaked
Informed and cooperates with law enforcement agencies and data protection authorities
Changes made: Strengthen Foxit’s security posture
Protect against future cyber security incidents
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Delaware State AGAug 30 · first

California State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-150242
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 3, 2019
Raw hash: d7046d3e084d243073303d6e8c617e6444637914a7f091bda2323f4b2430f14a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFOXIT SOFTWARE INCORPORATED

Victim entityFOXIT SOFTWARE INCORPORATED

IncidentUnauthorized Access

Stated responseLaunched a digital forensics investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov