HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AMERICAN FINANCIAL RESOURCES, INC.
bd_ae1bcd2b96d72dd2 · schema v1 · pii pii-v1
Full breach record for AMERICAN FINANCIAL RESOURCES, INC. →American Financial Resources, Inc. notified Delaware residents of a security incident where unauthorized access occurred between December 6 and 20, 2021. The breach exposed personal information, including names and government identifiers. AFR secured its network, notified law enforcement, and offered one year of Kroll identity monitoring. Remediation included deploying EDR tools, resetting passwords, and upgrading server software.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_44ef18fe7ecaf2e3New Hampshire State AGfiled 2022-03-11Verified
- bd_ad37ba6575f26947California State AGfiled 2022-03-11Candidate
- bd_b7bfeb2eda20b1beWashington State AGfiled 2022-03-11Verified
- bd_c6ae3d9572dbc582Oregon State AGfiled 2022-03-11Verified
Show 1 more filing ↓Show fewer ↑
- bd_ff196c82f63908aeMontana State AGfiled 2022-03-11Verified
Source provenance
- Source URL
- https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/03/AFR_Delaware-Notice-to-Residents.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 11, 2022
- Raw hash
- d5477652e608be0bc157195ddc58ccf8eb5e068ca7d39b28c238e65e88164403
Reporting entity
- Name
- AMERICAN FINANCIAL RESOURCES, INC.norm: american financial resources
Victim entity
- Name
- AMERICAN FINANCIAL RESOURCES, INC.norm: american financial resources
Incident
- Discovered
- Dec 6, 2021
- Materiality determined
- —
- Notification sent
- Mar 4, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Regulator citations
- Notified law enforcement and are cooperating with their investigation
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 14 weeks(95 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.