HackingVulnerability ExploitData MishandlingSupply Chain (3P Vendor)Customer Data InvolvedPIIIDENTITY_BASICLowContained
Franklin Templeton
bd_9ff18d39827ab20c · schema v1 · pii pii-v1
Full breach record for Franklin Templeton →Franklin Templeton Investments Corp. reported a third-party breach involving vendor InvestorCOM. A vulnerability in InvestorCOM's GoAnywhere file transfer service was exploited on Jan 30, 2023. The incident affected personal information of 5 New Hampshire residents. Franklin Templeton activated incident response, reviewed impacted files, and notified regulators. No SSNs or dates of birth were involved.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed5 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/franklin-templeton-investments-20230523.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 23, 2023
- Raw hash
- d92a1f6007c282400f04e43a3b3b9fbd6262a8692d7c25ea490086a35a3b180d
Reporting entity
- Name
- Franklin Templeton Investments Corp.norm: franklin templeton investments
Victim entity
- Name
- Franklin Templetonnorm: franklin templeton
- Domain
- franklintempleton.com
Incident
- Discovered
- May 23, 2023
- Materiality determined
- —
- Notification sent
- May 23, 2023
- Affected individuals
- 5
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Third-Party / Supply Chain
- MITRE ATT&CK
- T1195 Supply Chain CompromiseT1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Reported this incident to privacy, securities and financial regulatory authoritiesInvestorCOM has reported it to law enforcement
- Third party
- via InvestorCOM
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.