Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
FORTRESS BIOTECH, INC.
bd_5eb6da48e3a035d4 · schema v1 · pii pii-v1
Full breach record for FORTRESS BIOTECH, INC. →Fortress Biotech, Inc. notified the New Hampshire Attorney General of a phishing incident affecting approximately 5 NH residents. On August 25, 2021, an unauthorized actor accessed an employee's email account. Impacted data may include names, DOB, SSN, driver's license, and financial account info. Fortress reset credentials, enhanced security protocols, and offered 24 months of Experian credit monitoring. Notices were mailed starting March 18, 2022.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_948608064db424e5Montana State AGfiled 2022-03-18Candidate
- bd_a6731dd81ec0a41aMaine State AGfiled 2022-03-18Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/fortress-bioteach-20220318.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 18, 2022
- Raw hash
- 887d3fee295f75bfc3e24d88be9cf8d52c9ed2f73cf585e5dc0d0bec70201972
Reporting entity
- Name
- FORTRESS BIOTECH, INC.norm: fortress biotech
Victim entity
- Name
- FORTRESS BIOTECH, INC.norm: fortress biotech
Incident
- Discovered
- Aug 25, 2021
- Materiality determined
- —
- Notification sent
- Mar 18, 2022
- Affected individuals
- 5
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- phishing_link
Compliance
- Time to disclose
- 29 weeks(205 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.