HackingStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Financial Risk Mitigation, Inc
bd_927bb0e435c12e30 · schema v1 · pii pii-v1
Full breach record for Financial Risk Mitigation, Inc →Financial Risk Mitigation, Inc. notified New Hampshire residents of a data breach occurring Sept 28-29, 2023. Unauthorized access to systems resulted in the copying of personal information. FRM engaged forensic investigators, secured affected systems, and offered credit monitoring to 16 identified NH residents. Investigation concluded Nov 10, 2023.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2a69930e7a1ee22dMaine State AGfiled 2023-12-07Candidate
- bd_c40099f4c242a53bMontana State AGfiled 2023-12-07Verified
- bd_cf54cf6cb330649dCalifornia State AGfiled 2023-12-07Verified
- bd_cf67735947cace93Vermont State AGfiled 2023-12-07Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/financial-risk-mitigation-20231207.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 7, 2023
- Raw hash
- 45a477f11882417fabcf1452e908c71d72f3ae16b17d191d57b4ab94370ff8f8
Reporting entity
- Name
- Financial Risk Mitigation, Incnorm: financial risk mitigation
- Domain
- frm-inc.com
Victim entity
- Name
- Financial Risk Mitigation, Incnorm: financial risk mitigation
- Domain
- frm-inc.com
Incident
- Discovered
- Sep 29, 2023
- Materiality determined
- Nov 10, 2023
- Notification sent
- Dec 7, 2023
- Affected individuals
- 16
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Provided written notice to relevant state regulatorsProvided written notice to the three major credit reporting agencies
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.