HackingDelayed DiscoveryIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHIMediumActive
Flatirons Solutions
bd_569a74daa5ff3de3 · schema v1 · pii pii-v1
Full breach record for Flatirons Solutions →Flatirons Solutions, Inc. notified consumers of a data breach where an unauthorized actor accessed the corporate network between Dec 15, 2022, and Jan 1, 2023. Impacted data included names, DOBs, SSNs, financial account info, and health insurance info. Flatirons engaged third-party cybersecurity specialists, notified federal law enforcement, and offered credit monitoring. Investigation is ongoing.
Vermont clock✗ VT AG >45 bday14 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 80 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_6cb938132d1dead3Montana State AGfiled 2023-04-10Candidate
- bd_af56eedc39a4ed23Maine State AGfiled 2023-04-10Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-04-10-flatirons-solutions-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Apr 10, 2023
- Raw hash
- dbf4b458f8cbdba6da29fbbbe9892f5aa6a9ece9e7bf741e032a88ee8201d849
Reporting entity
- Name
- Flatirons Solutionsnorm: flatirons solutions
- Domain
- flatironssolutions.com
Victim entity
- Name
- Flatirons Solutionsnorm: flatirons solutions
- Domain
- flatironssolutions.com
Incident
- Discovered
- Jan 1, 2023
- Materiality determined
- Apr 10, 2023
- Notification sent
- Apr 10, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTPHI
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified appropriate regulators, as required
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(99 days from discovery to filing)
- Compliance flags
- VT AG >45 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.