HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumResolved

Franklin International

bd_762f51273f0037e1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Oct 19, 2021

Filed

May 31, 2022

To disclose

32 weeks

Affected

2state residents only

Linked

2 filings

Confidence

66%

Full breach record for Franklin International →

Franklin International notified the NH Attorney General of a data breach affecting 2 NH residents. Unauthorized access occurred between Oct 18-19, 2021, and was discovered on Oct 19, 2021. The actor viewed and/or took files containing names, SSNs, bank account numbers, and routing numbers. This notice is supplemental to a prior notification sent in Nov 2021. The company offered 2 years of credit monitoring via Experian.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 32 weeks / 224 days

Oct 18, 2021

Begins

Oct 19, 2021

Discovered

May 31, 2022

Filed

vs. sector median

+24 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_5208eb66e6a6249b2022-05-27 · +4dVerified

Name: Franklin International
norm: franklin international
Domain: franklininternational.com

Name: Franklin International
norm: franklin international
Domain: franklininternational.com
Industry: Financial Servicesllm

Discovered: Oct 19, 2021
Breach occurred: Oct 18, 2021 – Oct 19, 2021
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: May 27, 2022
Affected individuals: 2state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcementProviding written notice of this incident to relevant state regulators

During the incident: Took steps to mitigate the impact of the incident
Launched an investigation to determine the full nature and scope of the event
Worked with specialists to conduct a comprehensive review of the impacted data
Notified federal law enforcement regarding the event
Providing access to credit monitoring and identity restoration services for two (2) years, through Experian
Providing potentially impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state regulators
Providing written notice to the three major credit reporting agencies, Equifax, Experian, and TransUnion
Changes made: Working to implement additional safeguards and training to its employees
Working to review and further enhance these protections as part of our ongoing commitment to data security
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 32 weeks(224 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGMay 27 · first

New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/franklin-international-20220531.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 31, 2022
Raw hash: bef7c20ed109d4187f94800fa2ee2570f33895e1ec9a645b8bd9cb8466de9b0d

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFranklin International

Victim entityFranklin International

Incidentdiscovered Oct 19, 2021

Stated responseTook steps to mitigate the impact of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov