HackingFinancial ServicesFinanceVulnerability ExploitSupply Chain (3P Vendor)Data ExfiltratedPIIIdentity (basic)LowContained

Franklin Templeton Canada

bd_6a1d45b9f535e08a · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

May 23, 2023

To disclose

—

Affected

4state residents only

Linked

2 filings

Confidence

66%

Franklin Templeton Canada notified Montana residents of a third-party breach involving vendor InvestorCOM. A vulnerability in InvestorCOM's GoAnywhere file transfer service was exploited on Jan 30, 2023. Incident involved names, addresses, and account numbers. No SINs or DOBs were involved. Franklin Templeton activated incident response, notified regulators, and enhanced account access controls.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 30, 2023

Begins

May 23, 2023

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Maine State AGbd_7138ccdeac4fc3412023-05-23Verified

Name: Franklin Templeton Investments Corp.
norm: franklin templeton investments

Name: Franklin Templeton Canada
norm: franklin templeton canada
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 30, 2023
Materiality determined: —
Notification sent: May 23, 2023
Affected individuals: 4state-resident count only
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1195 Supply Chain Compromise
Threat actor: External
Regulator citations: Reported incident to privacy, securities and financial regulatory authoritiesInvestorCOM reported it to law enforcement
Third party: via InvestorCOM
Initial access: exploit_public_facing

During the incident: Activated incident response protocols
Opened own investigation
Gathering information from InvestorCOM
Conducted thorough review of impacted files
Implemented additional measures to help protect account(s)
Enhanced protection protocols for heightened due diligence and monitoring
Tightened controls around account access
Notified dealer and investment advisor
Reported incident to privacy, securities and financial regulatory authorities
Changes made: Enhanced protection protocols for heightened due diligence and monitoring
Tightened controls around account access (via both call centre and secure web)
Tightened controls around transaction and payment processing
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGMay 23 · first

Montana State AGMay 23 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-307.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 23, 2023
Raw hash: 1e5cd5809de9f2f7436d49b0a762f44a5f973894612fddce0195860821b0954a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFranklin Templeton Investments Corp.

Victim entityFranklin Templeton Canada

IncidentThird-Party / Supply Chain

Stated responseActivated incident response protocols

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov