FORTRESS BIOTECH, INC.
bd_5eb6da48e3a035d4 · schema v1 · pii pii-v1
Full breach record for FORTRESS BIOTECH, INC. →Fortress Biotech, Inc. notified the NH Attorney General of a phishing attack on an employee's email account discovered on August 25, 2021. The unauthorized access lasted approximately one hour before the password was changed. Approximately five New Hampshire residents may have had their personal information (name, DOB, SSN, driver's license, financial account info) exposed. The company offered 24 months of credit monitoring and enhanced security protocols.
J jump to incidentP pin to compareR raw source
Incident timeline
Aug 25, 2021
Begins
Aug 25, 2021
Discovered
Mar 18, 2022
Filed
vs. sector median
+17 wks slower
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- Indiana State AGbd_4889cd869e4aeb902022-03-18Verified
- Montana State AGbd_948608064db424e52022-03-18Candidate
- Maine State AGbd_a6731dd81ec0a41a2022-03-18Verified
- Massachusetts State AGbd_637e62e5405fdb142022-03-23 · +5dVerified
Filing propagation · 5 filings · 5 states
View merged incident ↗Pattern: first filing Mar 18 (IN), last Mar 23 (MA) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.