HackingVulnerability ExploitData ExfiltratedCustomer Data InvolvedTargetedPIIFINANCIALLowActive
Fora Financial
bd_53764b747a252fff · schema v1 · pii pii-v1
Full breach record for Fora Financial →Fora Financial LLC notified the New Hampshire Attorney General of a security incident affecting 11 NH residents. On or about September 9, 2022, unauthorized third parties obtained deal-related information via an exploit in Fora's information systems. The data included personal and business financial information. The investigation was ongoing as of March 29, 2023. Credit monitoring was offered.
This filing is one of 4 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_05be91cc7db2be26Montana State AGfiled 2023-03-29Candidate
- bd_9dbbd38a4ffe9c5fVermont State AGfiled 2023-03-29Verified
- bd_e6e0434f0c22e8fcMaine State AGfiled 2023-03-29Verified by operator
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fora-financial-20230329.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 29, 2023
- Raw hash
- 1e2967a8a8925166f56b46a02474c1c467a042f2230e8d981907b2e1d5851ac7
Reporting entity
- Name
- Fora Financialnorm: fora financial
- Domain
- forafinancial.com
Victim entity
- Name
- Fora Financialnorm: fora financial
- Domain
- forafinancial.com
Incident
- Discovered
- Sep 9, 2022
- Materiality determined
- —
- Notification sent
- Mar 29, 2023
- Affected individuals
- 11
- Data types
- PIIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Providing notice to the Office of the Attorney General, NH Department of Justice
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 weeks(201 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.