MalwareTechnologyInformationRansomwareData ExfiltratedData EncryptedIdentity (basic)Government IDMediumContained

FGX INTERNATIONAL INC.

bd_a36652d481303a9c · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Sep 23, 2020

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for FGX INTERNATIONAL INC. →

FGX International Inc. notified the NH Attorney General of a ransomware attack between May 7 and June 25, 2020. Malware was blocked from encrypting systems, but an unauthorized actor likely exfiltrated data. One NH resident's name and SSN were impacted. FGX engaged forensic counsel, notified law enforcement, and offered 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

May 7, 2020

Begins

Sep 23, 2020

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_40114c374190321f2020-09-22 · +1dVerified
Indiana State AGbd_77bb6118ccef04992020-09-22 · +1dVerified

Name: FGX INTERNATIONAL INC.
norm: fgx international

Name: FGX INTERNATIONAL INC.
norm: fgx international
Industry: Technologyllm

Discovered: —
Breach occurred: May 7, 2020 – Jun 25, 2020
Materiality determined: —
Notification sent: Sep 22, 2020
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security number
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified federal law enforcement

During the incident: Launched an investigation to determine the nature and scope of the incident
A third party cybersecurity firm was engaged to assist
Notified federal law enforcement
Changes made: Implemented additional security measures designed to enhance the security of its network, systems, and data
Implementation of an email filtering and protection solution
Enhanced network restrictions
Working to install enhanced firewall appliances
Continues to review its security measures, internal controls, and safeguards
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGSep 22 · first

Indiana State AGSep 22 · first

New Hampshire State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/f-g-x-international-20200923.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 23, 2020
Raw hash: e54953415f5c4ea65a8a3ef0752cb8a3b7d45c2f896614716ce5d0fabcb2dfdc

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityFGX INTERNATIONAL INC.

Victim entityFGX INTERNATIONAL INC.

IncidentRansomware

Stated responseLaunched an investigation to determine the nature and scope of the incident

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov