HackingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

AFNI, INC.

bd_b50bc1d6295aa9ed · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 7, 2021

Filed

Jul 11, 2022

To disclose

13 months

Affected

Not disclosed

Linked

9 filings

Confidence

66%

Full breach record for AFNI, INC. →2 incidents on file

Afni, Inc. notified Delaware AG of a security incident discovered on June 7, 2021, where an unauthorized actor accessed systems potentially exposing names, addresses, SSNs, and DOBs. Notification letters were sent on June 14, 2022, offering 12 months of Equifax credit monitoring. No identity theft was confirmed.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 13 months / 399 days

Jun 7, 2021

Discovered

Jul 11, 2022

Filed

This filing is one of 9 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

California State AGbd_12a087524a0701362022-07-11Verified
Massachusetts State AGbd_443af9e6561441872022-07-11Verified
Indiana State AGbd_5630afede7aa4f572022-07-11Verified
Washington State AGbd_658798f82dbd21772022-07-11Verified

Show 4 more filings ↓up to 191d gap

Oregon State AGbd_b7b0e4beb608b17f2022-07-11Verified
Maine State AGbd_dd102326b4704f302022-07-11Verified
South Carolina State AGbd_1c373e5670b8ed452022-07-12 · +1dVerified
Illinois State AGbd_433840d69667e09a2022-01-01 · +191dCandidate

Name: AFNI, INC.
norm: afni

Name: AFNI, INC.
norm: afni

Discovered: Jun 7, 2021
Materiality determined: —
Notification sent: Jun 14, 2022
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Investigated and responded to the event
Assessed the security of our systems
Notified potentially affected individuals
Offering credit monitoring and identity theft protection services through Equifax for 12 months
Changes made: Offering credit monitoring and identity theft protection services through Equifax for 12 months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 13 months(399 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Illinois State AGJan 1 · first

California State AG+191d

Massachusetts State AG+191d

Indiana State AG+191d

Washington State AG+191d

Oregon State AG+191d

Maine State AG+191d

Delaware State AG+191d · this page

South Carolina State AG+192d

Pattern: first filing Jan 1 (IL), last Jul 12 (SC) — a 192-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2022/07/Pages-from-Afni-Notice-of-Data-Event-DE.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 11, 2022
Raw hash: 523443089ec47374e10d5413aec886ef5818238c4e3fd9417550346f3d416970

Linked disclosures

Regulatory filings (8) · sorted by filing gap

Reporting entityAFNI, INC.

Victim entityAFNI, INC.

Incidentdiscovered Jun 7, 2021

Stated responseInvestigated and responded to the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov