MalwareRansomwareData ExfiltratedRansom DemandedCustomer Data InvolvedPIIIDENTITY_BASICMediumContained
First Financial Sercurity, Inc.
bd_be68a4e3fb13fb6a · schema v1 · pii pii-v1
Full breach record for First Financial Sercurity, Inc. →First Financial Security, Inc. (FFS) reported a ransomware attack on October 17, 2023, impacting approximately 6,842 individuals, including 1 New Hampshire resident. FFS, a third-party distribution partner for Columbus Life Insurance, engaged IDX (ZeroFox) to provide credit monitoring and identity theft protection services to affected individuals. Notifications were sent in January 2024.
Leak gap clock⏱ Leak >90d14 weeks discovery → filing
This filing is one of 8 about the same incident.View merged incident
A leak claim by ransomhouse about this victim predates this filing by 95 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (7) · sorted by filing gap
- bd_3cce2402d8d3ade9California State AGfiled 2024-01-22Verified
- bd_376c075094fa399aSouth Carolina State AGfiled 2024-01-23(1d gap)Verified
- bd_d5e7a15eb37ead79Oregon State AGfiled 2024-01-23(1d gap)Verified
- bd_e247aee4a995db93Montana State AGfiled 2024-01-23(1d gap)Verified
Show 3 more filings ↓Show fewer ↑up to 19d gap
- bd_4d924f83378dd373California State AGfiled 2024-01-19(3d gap)Verified
- bd_c0dc65dca43d10baIndiana State AGfiled 2024-01-19(3d gap)Verified
- bd_aff224a399f38befWashington State AGfiled 2024-01-03(19d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/columbus-life-ins-co-first-financial-security-20240122.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jan 22, 2024
- Raw hash
- b382caca09cce718b9762b5a27d3545af59fee2a851f0e587db50b2cb929c7ef
Reporting entity
- Name
- First Financial Sercurity, Inc.norm: first financial sercurity
- Domain
- firstfinancialsecurity.com
Victim entity
- Name
- First Financial Sercurity, Inc.norm: first financial sercurity
- Domain
- firstfinancialsecurity.com
Incident
- Discovered
- Oct 17, 2023
- Materiality determined
- Nov 28, 2023
- Notification sent
- Jan 19, 2024
- Affected individuals
- 6,842
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of JusticeNotified New Hampshire Insurance Department
Compliance
- Time to disclose
- 14 weeks(97 days from discovery to filing)
- Compliance flags
- Leak >90d
- Discovery-date grounding
- letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.