HackingFinancial ServicesFinanceStolen CredentialsBECTargetedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIIMediumContained

Advanced Financial Services, Inc.

bd_ad7311d5887bd38d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 11, 2017

Filed

Sep 6, 2017

To disclose

8 weeks

Affected

Not disclosed

Confidence

64%

Full breach record for Advanced Financial Services, Inc. →

Advanced Financial Services and Accu-Pay notified clients of unauthorized access attempts to investment accounts and fraudulent credit applications starting July 11, 2017. While attempts failed, an unknown third party accessed client PII including SSNs and financial data. The firm engaged forensic investigators, notified the FBI and IRS, and provided one year of Equifax Credit Watch Gold protection.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 8 weeks / 57 days

Jul 11, 2017

Discovered

Sep 6, 2017

Filed

vs. sector median

on median

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Advanced Financial Services, Inc.
norm: advanced financial

Name: Advanced Financial Services, Inc.
norm: advanced financial
Industry: Financial Servicesllm

Discovered: Jul 11, 2017
Materiality determined: —
Notification sent: Aug 28, 2017
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: contacted the FBIcontacted the IRS
Initial access: valid_credentials

During the incident: Commenced an internal investigation
Retained an independent computer forensic firm to conduct a thorough investigation
Contacted the FBI, and the IRS
Corrected the vulnerability in our system
Reviewing our internal policies and data management protocols
Implemented enhanced security measures
Partnered with Equifax to provide its Credit Watch Gold identity theft protection product for one year
Changes made: Corrected the vulnerability in our system
Reviewing our internal policies and data management protocols
Implemented enhanced security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(57 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2017/AdvancedFinancialServicesInc..pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 6, 2017
Raw hash: 3df13b9950043b54fa6ff7375309a97c1e0971da7df3dc26c2e73f37b8c17f94

Reporting entityAdvanced Financial Services, Inc.

Victim entityAdvanced Financial Services, Inc.

Incidentdiscovered Jul 11, 2017

Stated responseCommenced an internal investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov