HackingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
focusIT, Inc
bd_55a4b243f663675a · schema v1 · pii pii-v1
Full breach record for focusIT, Inc →focusIT, Inc. notified the New Hampshire Attorney General of a security incident affecting 574 NH residents. On August 2, 2022, focusIT was notified by the Texas Financial Crimes Intelligence Center that unknown threat actors compromised a third-party system in focusIT's environment, potentially accessing personal information (name, DOB, address, SSN) of applicants for a mortgage processor customer. focusIT investigated, contained the incident, and notified the FBI. Affected individuals received 12 months of free credit monitoring via Equifax.
This filing is one of 7 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (6) · sorted by filing gap
- bd_479c611d12338431Delaware State AGfiled 2022-09-29Candidate
- bd_9e053a4f72bbc71fDelaware State AGfiled 2022-09-29Verified
- bd_ffe5901a07fbecd3Montana State AGfiled 2022-09-29Verified
- bd_1c71a9b8a3fa1051Washington State AGfiled 2022-09-30(1d gap)Verified
Show 2 more filings ↓Show fewer ↑up to 1d gap
- bd_45a661a492b146b5Oregon State AGfiled 2022-09-30(1d gap)Verified
- bd_ebe2aa484d17951cMaine State AGfiled 2022-09-30(1d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/focusit-20220929.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2022
- Raw hash
- bfd5dfb7c78f4e13d13bdb612f431f502109ef716c0165e5a83967572afc10a6
Reporting entity
- Name
- focusIT, Incnorm: focusit
- Domain
- focusitinc.com
Victim entity
- Name
- focusIT, Incnorm: focusit
- Domain
- focusitinc.com
Incident
- Discovered
- Aug 2, 2022
- Materiality determined
- —
- Notification sent
- Sep 29, 2022
- Affected individuals
- 574
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain Compromise
- Threat actor
- External
- Regulator citations
- Notified the New Hampshire Office of the Attorney General, Consumer Protection Bureauworking with the appropriate law enforcement and regulatory officials including the FBI
- Initial access
- supply_chain
Compliance
- Time to disclose
- 8 weeks(58 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.