UnknownFinanceHigh

First Financial Security

bd_d5e7a15eb37ead79 · schema v1 · pii pii-v1

Severity

High

Discovered

Oct 17, 2023

Filed

Jan 23, 2024

To disclose

14 weeks

Affected

105,764

Linked

13 filings

Confidence

95%

Full breach record for First Financial Security →

First Financial Security, Inc. reported a data breach to the Oregon Attorney General. The breach was reported on 2024-01-23. The breach occurred during 10/17/2023 - 10/17/2023. The breach was discovered on 10/17/2023. 105,764 individuals were affected. Notice was sent on 1/19/2024.

J jump to incidentP pin to compareR raw source

Oregon clock✗ OR AG >45d14 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 14 weeks / 98 days

Oct 17, 2023

Begins

Oct 17, 2023

Discovered

Jan 23, 2024

Filed

This filing is one of 13 about the same incident.View merged incident

A leak claim by ransomhouse about this victim predates this filing by 96 days.View originating leak claim

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Massachusetts State AGbd_26bec3675d7747c02024-01-23Verified by operator
South Carolina State AGbd_376c075094fa399a2024-01-23Verified
Montana State AGbd_e247aee4a995db932024-01-23Verified
Maine State AGbd_07e779fa3c454dd32024-01-22 · +1dVerified

Show 6 more filings ↓up to 10d gap

California State AGbd_3cce2402d8d3ade92024-01-22 · +1dVerified
New Hampshire State AGbd_be68a4e3fb13fb6a2024-01-22 · +1dVerified
California State AGbd_4d924f83378dd3732024-01-19 · +4dVerified
Indiana State AGbd_c0dc65dca43d10ba2024-01-19 · +4dVerified by operator
New Hampshire State AGbd_fdcfb106d48342b82024-02-01 · +9dVerified
Massachusetts State AGbd_dc6f4463bca2e3692024-02-02 · +10dVerified by operator

Showing first 10 of 12 linked disclosures.

Name: First Financial Security
norm: first financial security
Domain: firstfinancialsecurity.com

Name: First Financial Security
norm: first financial security
Domain: firstfinancialsecurity.com

Discovered: Oct 17, 2023
Breach occurred: Oct 17, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 19, 2024
Affected individuals: 105,764nationwide
Data types: —
Attack vector: Unknown

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: OR AG >45dLeak >90d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 8 states

View merged incident ↗

California State AGJan 19 · first

Indiana State AGJan 19 · first

Maine State AG+3d

California State AG+3d

New Hampshire State AG+3d

Massachusetts State AG+4d

South Carolina State AG+4d

Montana State AG+4d

Oregon State AG+4d · this page

New Hampshire State AG+13d

Massachusetts State AG+14d

Pattern: first filing Jan 19 (CA), last Feb 2 (MA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 12 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://justice.oregon.gov/consumer/DataBreach/
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 23, 2024
Raw hash: ea6b56cb935a77371175fb3e0cb0b418533707ff9c8278c3471ba2257cd52090

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityFirst Financial Security

Victim entityFirst Financial Security

Incidentdiscovered Oct 17, 2023

ComplianceOR AG >45d

Extraction provenanceno artifact recorded

Source provenancejustice.oregon.gov