HackingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALSMediumContained
Wing Financial Services
bd_dd0eab397cd0f931 · schema v1 · pii pii-v1
Full breach record for Wing Financial Services →Wing Financial Services, LLC, a tax preparation franchise, disclosed a data security incident where unauthorized parties accessed client records on August 7, 2022. Exposed data included PII, SSNs, financial account numbers, and medical history. The company engaged forensic experts, secured systems, reset credentials, and offered 12 months of credit monitoring to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_222b5057f3b0599eMontana State AGfiled 2022-12-01(4d gap)Candidate
- bd_6dc3ef53bf4e5cbaMaine State AGfiled 2022-12-01(4d gap)Verified
- bd_97c60aad9fad22eeMaine State AGfiled 2022-12-30(25d gap)Verified
- bd_ea86ace32dbbea5dMaine State AGfiled 2023-03-15(100d gap)Verified
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/wing-financial-services-20221205.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 5, 2022
- Raw hash
- 50f3932dc6ebe6699526fb85614b87df6340bc49cb8989cb3bf032c0f652d374
Reporting entity
- Name
- Wing Financial Servicesnorm: wing financial
Victim entity
- Name
- Wing Financial Servicesnorm: wing financial
Incident
- Discovered
- Aug 7, 2022
- Materiality determined
- Nov 10, 2022
- Notification sent
- Dec 1, 2022
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTHEALTH_BASICCREDENTIALS
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing ApplicationT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 17 weeks(120 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.