HackingFinancial ServicesFinanceStolen CredentialsCapture Stored DataCustomer Data InvolvedTargetedPIIFinancialMediumContained

Fora Financial

bd_b90668abdd56d361 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 9, 2022

Filed

Jan 18, 2024

To disclose

17 months

Affected · nationwide

3,27014 in this filing

Confidence

67%

Full breach record for Fora Financial →4 incidents on file

Fora Financial LLC reported a security breach where unauthorized third parties obtained deal-related personal information submitted in commercial financing applications. The incident was discovered on September 9, 2022. Approximately 3,270 individuals were affected, including 14 New Hampshire residents. Fora Financial terminated the compromise and provided credit monitoring services to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 17 months / 496 days

Sep 9, 2022

Discovered

Jan 18, 2024

Filed

vs. sector median

+62 wks slower

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed3,270 affectedView incident

Name: Fora Financial
norm: fora financial
Domain: forafinancial.com

Name: Fora Financial
norm: fora financial
Domain: forafinancial.com
Industry: Financial Servicesllm

Discovered: Sep 9, 2022
Materiality determined: —
Notification sent: Aug 28, 2023
Affected individuals: 3,270state + nationwide
Data types: PIIFinancial
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated CollectionT1074 Data Staged
Threat actor: ExternalFinancial
Regulator citations: Submitted Supplement to Notice of Security Breach to NH Attorney General

During the incident: Terminated the source of the compromise
Conducted a detailed data mining exercise to identify affected information
Provided credit monitoring and identity theft restoration services to affected individuals
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 months(496 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/fora-financial-20240118.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 18, 2024
Raw hash: ef54558bf6fd3170c5cf864e4c75090cca667406c4bcd04c1ed407ba14ffe13e

Reporting entityFora Financial

Victim entityFora Financial

Incidentdiscovered Sep 9, 2022

Stated responseTerminated the source of the compromise

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov