AccidentalFinancial ServicesFinanceMisconfigurationCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountMediumContained

Interbank FX, LLC

bd_bf41f7cd0abb8a4d · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 28, 2008

Filed

Apr 9, 2008

To disclose

12 days

Affected

16state residents only

Linked

2 filings

Confidence

66%

Full breach record for Interbank FX, LLC →

Interbank FX, LLC notified the New Hampshire Attorney General of a data security breach affecting 16 state residents. An employee inadvertently uploaded a file containing personal information (SSN, driver's license, passport) to an internet-accessible server on April 2, 2007. The company discovered the exposure on March 28, 2008, removed the files, and terminated the employee's access. Affected individuals were offered one year of free credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 361 days

discovery → filing · 12 days

Apr 2, 2007

Begins

Mar 28, 2008

Discovered

Apr 9, 2008

Filed

vs. sector median

7 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_1b74de367aeeea542008-04-10 · +1dVerified

Name: InterBank
norm: interbank
Domain: interbank.com

Name: Interbank FX, LLC
norm: interbank fx
Industry: Financial Servicesllm

Discovered: Mar 28, 2008
Breach occurred: Apr 2, 2007
Undetected for: 361 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 8, 2008
Affected individuals: 16state-resident count only
Data types: Government IDIdentity (basic)Financial account
Data elements: Social Security number
Attack vector: Misconfiguration
MITRE ATT&CK: T1119 Automated Collection
Threat actor: Internal
Regulator citations: Notified New Hampshire Attorney General
Initial access: insider_action

During the incident: Removed files containing sensitive personal information from the server and brought within the Company's firewalls and electronic security controls
Terminated the employee's access to all personal information in Interbank FX's files
Offered enrollment in Equifax Credit WatchTM Gold with 3-in-1 Monitoring for a one-year period at no cost
Reimbursed direct cost of any credit file freeze
Established a toll-free hotline
Changes made: Plan further steps to strengthen security
Review safeguards in light of this incident
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

New Hampshire State AGApr 9 · first · this page

Massachusetts State AG+1d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/interbank-fx-20080409.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 9, 2008
Raw hash: 0ccf34adb83d07439c02e65d5647cecc0a703ef3c229db13b2d6311a874a93b2

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityInterBank

Victim entityInterbank FX, LLC

Incidentdiscovered Mar 28, 2008

Stated responseRemoved files containing sensitive personal information from the server and brought within the Company's firewalls and electronic security controls

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov