HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountPIICriticalContained

1ST FRANKLIN FINANCIAL CORPORATION

bd_c448f2a9cb8352f6 · schema v1 · pii pii-v1

Severity

Critical

Discovered

Nov 17, 2022

Filed

Feb 22, 2023

To disclose

14 weeks

Affected

147,192state residents only

Linked

8 filings

Confidence

65%

Full breach record for 1ST FRANKLIN FINANCIAL CORPORATION →

1st Franklin Financial Corporation notified individuals of a cybersecurity incident occurring on November 17, 2022, where an unauthorized third party accessed and/or exfiltrated data from its IT environment. Impacted data included names, SSNs, bank account/routing numbers, and potentially credit report information. The company engaged outside experts, blocked access, and offered credit monitoring.

J jump to incidentP pin to compareR raw source

South Carolina clock✓ SC CRA notice due14 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 97 days

Nov 17, 2022

Begins

Nov 17, 2022

Discovered

Feb 22, 2023

Filed

vs. sector median

+6 wks slower

This filing is one of 8 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (7) · sorted by filing gap

Montana State AGbd_0f301abc01d259d12023-03-02 · +8dVerified by operator
Vermont State AGbd_78421a87f880eedc2023-03-02 · +8dVerified
New Hampshire State AGbd_7d2d18c82fcc9cb12023-03-02 · +8dVerified
Massachusetts State AGbd_6cc99e9fdb9359cb2023-03-09 · +15dVerified

Show 3 more filings ↓up to 43d gap

California State AGbd_3fa3cf4006932edb2023-03-23 · +29dVerified by operator
Maine State AGbd_9eb0df3dc0ec2cb22023-01-18 · +35dCandidate
Indiana State AGbd_6c626572f091c0f52023-01-10 · +43dVerified

Name: 1ST FRANKLIN FINANCIAL CORPORATION
norm: 1st franklin financial

Name: 1ST FRANKLIN FINANCIAL CORPORATION
norm: 1st franklin financial
Industry: Financial Servicesllm

Discovered: Nov 17, 2022
Breach occurred: Nov 17, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 10, 2023
Affected individuals: 147,192state-resident count only
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Initial access: exploit_public_facing

During the incident: Immediately investigated and aggressively responded to this event
Passwords were changed
Unauthorized access was blocked
Outside technical experts were also engaged to further investigate and evaluate the nature and scope of the incident
Conducted a review of the data (which involved a combination of automated and eyes-on examination of the impacted files)
Offering 12 months of free credit monitoring and $1 million in identity theft insurance through Experian
Changes made: Continuing to take steps to enhance our security measures to help reduce the risk of something like this happening in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(97 days from discovery to filing)
Compliance flags: SC CRA notice due
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 8 filings · 8 states

View merged incident ↗

Indiana State AGJan 10 · first

Maine State AG+8d

South Carolina State AG+43d · this page

Montana State AG+51d

Vermont State AG+51d

New Hampshire State AG+51d

Massachusetts State AG+58d

California State AG+72d

Pattern: first filing Jan 10 (IN), last Mar 23 (CA) — a 72-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2023/1stFranklinFinancialCorporation.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 22, 2023
Raw hash: 0cf1b4a6bbc92e06d39729d8b996274976d802c75b8fbf4fff5adb90572ce73c

Linked disclosures

Regulatory filings (7) · sorted by filing gap

Reporting entity1ST FRANKLIN FINANCIAL CORPORATION

Victim entity1ST FRANKLIN FINANCIAL CORPORATION

Incidentdiscovered Nov 17, 2022

Stated responseImmediately investigated and aggressively responded to this event

ComplianceSC CRA notice due

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov