HackingStolen CredentialsCapture Stored DataData ExfiltratedTargetedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
Financial Risk Mitigation, Inc
bd_cf67735947cace93 · schema v1 · pii pii-v1
Full breach record for Financial Risk Mitigation, Inc →Financial Risk Mitigation, Inc. (FRM), a corporate investigative firm, disclosed a data breach involving unauthorized access to its systems between September 28-29, 2023. The incident resulted in the copying and exfiltration of files containing personal information, including names and government identifiers (e.g., SSNs). FRM engaged third-party forensic investigators, secured affected systems, and is offering 24 months of credit monitoring and identity theft restoration services to affected individuals. The investigation determined the files were copied and taken.
Vermont clock✗ VT AG >45 bday10 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_2a69930e7a1ee22dMaine State AGfiled 2023-12-07Candidate
- bd_927bb0e435c12e30New Hampshire State AGfiled 2023-12-07Verified
- bd_c40099f4c242a53bMontana State AGfiled 2023-12-07Verified
- bd_cf54cf6cb330649dCalifornia State AGfiled 2023-12-07Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-12-07-financial-risk-mitigation-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 7, 2023
- Raw hash
- 3b9afba862d25f0a96ee533e2162f0a8fd14eb9872fef4d65e10d1919591d4d4
Reporting entity
- Name
- Financial Risk Mitigation, Incnorm: financial risk mitigation
- Domain
- frm-inc.com
Victim entity
- Name
- Financial Risk Mitigation, Incnorm: financial risk mitigation
- Domain
- frm-inc.com
Incident
- Discovered
- Sep 29, 2023
- Materiality determined
- Nov 10, 2023
- Notification sent
- Dec 7, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- External
- Regulator citations
- Notifying applicable regulators
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 10 weeks(69 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.