HackingVulnerability ExploitCustomer Data InvolvedData ExfiltratedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Radius Global Solutions
bd_ca971e2632d37618 · schema v1 · pii pii-v1
Full breach record for Radius Global Solutions →Radius Global Solutions, LLC notified the California AG of a data event involving the MOVEit web transfer application. Unauthorized actors exploited a vulnerability in the application between May 29 and May 30, 2023. Radius discovered the vulnerability on June 1, 2023, and determined that some documents containing personal information (names, addresses, SSNs) were accessed. This is a supplemental notice. Radius has patched the system and is offering 24 months of identity monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_84a298c504c1e5e1Maine State AGfiled 2023-09-15Verified
- bd_bf246e16fd428295Washington State AGfiled 2023-09-15Verified
- bd_d83b146e7d5495e9Oregon State AGfiled 2023-09-15Verified
- bd_8611919e83990dacMontana State AGfiled 2023-09-12(3d gap)Candidate
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-573419
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 15, 2023
- Raw hash
- 754f6ca01f96bc61a8d2e82a61f4e1a3edfe259e268ee6e7feabff2b718e5c0c
Reporting entity
- Name
- Radius Global Solutionsnorm: radius global
Victim entity
- Name
- Radius Global Solutionsnorm: radius global
Incident
- Discovered
- Jun 1, 2023
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- External
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 15 weeks(106 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.