Social EngineeringPhishingCustomer Data InvolvedPIIIDENTITY_BASICLowContained
flexPATH Strategies
bd_956af0e49a3ab8c0 · schema v1 · pii pii-v1
Full breach record for flexPATH Strategies →flexPATH Strategies, LLC reported a phishing incident on December 7, 2018, where an unauthorized person accessed an employee's email account. The breach potentially exposed personal information of clients' employees, including data elements within email attachments. The company secured the account, engaged a security firm, and offered one year of complimentary credit monitoring via Experian IdentityWorks.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_0172292eef70ab30Hawaii State AGfiled 2019-03-15Verified
- bd_5c77e09d3d33f3b8Montana State AGfiled 2019-03-15Candidate
- bd_7a883bef71700ef0Washington State AGfiled 2019-03-15Verified
- bd_be14e8f992f427b8Oregon State AGfiled 2019-03-15Verified
Show 1 more filing ↓Show fewer ↑up to 33d gap
- bd_0691b0e3d1dc7a91California State AGfiled 2019-04-17(33d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-145490
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 15, 2019
- Raw hash
- 45f3cb8fa012667b97773f5ef4c0747e6731e059c084ceb9753ee5e7990decfa
Reporting entity
- Name
- flexPATH Strategiesnorm: flexpath strategies
Victim entity
- Name
- flexPATH Strategiesnorm: flexpath strategies
Incident
- Discovered
- Dec 14, 2018
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 13 weeks(91 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.