HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)PIIIdentity (basic)Government IDMediumContained

First Financial Portfolio Venture Capital

bd_55ca14badf642d37 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 26, 2024

Filed

Nov 14, 2024

To disclose

37 weeks

Affected

160scope not determined

Confidence

66%

Full breach record for First Financial Portfolio Venture Capital →3 incidents on file

Third-party data incident involving Financial Business and Consumer Solutions, Inc. (FBCS), a debt collection agency. Unauthorized access occurred between Feb 14-26, 2024. FBCS discovered the breach on Feb 26, 2024. Data exfiltrated included PII. First Financial Portfolio Venture Capital, LLC notified 160 additional individuals on Oct 17, 2024, after FBCS declared bankruptcy. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 12 days

discovery → filing · 37 weeks / 262 days

Feb 14, 2024

Begins

Feb 26, 2024

Discovered

Nov 14, 2024

Filed

vs. sector median

+29 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed160 affectedView incident

Name: First Financial Portfolio Venture Capital
norm: first financial portfolio venture

Name: First Financial Portfolio Venture Capital
norm: first financial portfolio venture
Industry: Financial Servicesllm

Discovered: Feb 26, 2024
Breach occurred: Feb 14, 2024 – Feb 26, 2024
Undetected for: 12 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 17, 2024
Affected individuals: 160scope not determined
Data types: PIIIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcement regarding the eventProviding notice of this incident to relevant state regulators
Third party: via Financial Business and Consumer Solutions, Inc.
Initial access: exploit_public_facing

During the incident: Launched an investigation with the assistance of third-party computer forensics specialists
Secured the impacted environment
Undertook a comprehensive review of the data at risk
Notified federal law enforcement regarding the event
Implemented additional safeguards in a newly built environment
Providing access to credit monitoring services for through Cyex
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Changes made: Implemented additional safeguards in a newly built environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 37 weeks(262 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/first-financial-portfolio-venture-capital-investment-fund-holdings-20241114.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 14, 2024
Raw hash: 5f004ec421a4e51d44ab36c39f1762aa8398cd52c8c91f4866408783a76e2e22

Reporting entityFirst Financial Portfolio Venture Capital

Victim entityFirst Financial Portfolio Venture Capital

Incidentdiscovered Feb 26, 2024

Stated responseLaunched an investigation with the assistance of third-party computer forensics specialists

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov