HackingTechnologyInformationDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIMediumActive

Flatirons Solutions

bd_569a74daa5ff3de3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 1, 2023

Filed

Apr 10, 2023

To disclose

14 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

66%

Full breach record for Flatirons Solutions →

Flatirons Solutions, Inc. notified consumers of a data breach where an unauthorized actor accessed the corporate network between Dec 15, 2022, and Jan 1, 2023. Impacted data included names, DOBs, SSNs, financial account info, and health insurance info. Flatirons engaged third-party cybersecurity specialists, notified federal law enforcement, and offered credit monitoring. Investigation is ongoing.

J jump to incidentP pin to compareR raw source

Vermont clock✗ VT AG >45 bday14 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 17 days

discovery → filing · 14 weeks / 99 days

Dec 15, 2022

Begins

Jan 1, 2023

Discovered

Apr 10, 2023

Filed

vs. sector median

5 wks faster

This filing is one of 7 about the same incident.View merged incident

A leak claim by lockbit_3 about this victim predates this filing by 80 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitelockbit_3bd_4d26750339779a682023-01-20 · +80dVerified by operator

Regulatory filings (5) · sorted by filing gap

Indiana State AGbd_44c849b4ff62f8a22023-04-10Candidate
Montana State AGbd_6cb938132d1dead32023-04-10Verified
Maine State AGbd_af56eedc39a4ed232023-04-10Verified
Massachusetts State AGbd_f315a91ed9ff0c002023-04-10Verified

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_aa23e343da6c4c732023-04-14 · +4dVerified

Name: Flatirons Solutions
norm: flatirons solutions
Domain: flatironssolutions.com

Name: Flatirons Solutions
norm: flatirons solutions
Domain: flatironssolutions.com
Industry: Technologyllm

Discovered: Jan 1, 2023
Breach occurred: Dec 15, 2022 – Jan 1, 2023
Undetected for: 17 daysoccurrence → discovery
Materiality determined: Apr 10, 2023
Notification sent: Apr 10, 2023
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPHI
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: External
Regulator citations: Notified appropriate regulators, as required
Initial access: exploit_public_facing

During the incident: Moved quickly to secure the systems
Launched an investigation with the assistance of third-party cybersecurity specialists
Reported this event to federal law enforcement and are assisting in their investigation
Offering ## months of complimentary credit monitoring through Experian
Changes made: Reviewing protocols, policies, and procedures to reduce the likelihood of a similar event from occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(99 days from discovery to filing)
Compliance flags: VT AG >45 bdayLeak >30d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGApr 10 · first

Montana State AGApr 10 · first

Maine State AGApr 10 · first

Massachusetts State AGApr 10 · first

Vermont State AGApr 10 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ago.vermont.gov/document/2023-04-10-flatirons-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 10, 2023
Raw hash: dbf4b458f8cbdba6da29fbbbe9892f5aa6a9ece9e7bf741e032a88ee8201d849

Linked disclosures

Ransomware claims (1)

Regulatory filings (5) · sorted by filing gap

Reporting entityFlatirons Solutions

Victim entityFlatirons Solutions

Incidentdiscovered Jan 1, 2023

Stated responseMoved quickly to secure the systems

ComplianceVT AG >45 bday

Extraction provenanceno artifact recorded

Source provenanceago.vermont.gov