MalwareRansomwareData EncryptedRansom DemandedCustomer Data InvolvedIDENTITY_BASICFINANCIAL_ACCOUNTHighContained
AFNI, INC.
bd_dd102326b4704f30 · schema v1 · pii pii-v1
Full breach record for AFNI, INC. →Afni, Inc. reported a ransomware incident to the Maine Attorney General. The breach occurred on June 7, 2021, and was discovered on June 2, 2022. Approximately 261,449 individuals were affected, including 262 Maine residents. The incident involved the encryption of data and the acquisition of financial account numbers combined with security codes or PINs. Consumers received written notification on July 11, 2022.
Maine clockDiscovered Jun 2, 2022 → Filed with AG Jul 11, 202239d ⏱ ME AG >30d6 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_12a087524a070136California State AGfiled 2022-07-11Verified
- bd_658798f82dbd2177Washington State AGfiled 2022-07-11Verified
- bd_b50bc1d6295aa9edDelaware State AGfiled 2022-07-11Verified
- bd_b7b0e4beb608b17fOregon State AGfiled 2022-07-11Verified
Show 1 more filing ↓Show fewer ↑up to 39d gap
- bd_6224191ca64a87d2Delaware State AGfiled 2022-06-02(39d gap)Candidate
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/22f470bc-511d-4067-911d-bbf0b230e9c6.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 11, 2022
- Raw hash
- 221c244ba7eb21ffb56530dda628ef0f6f8a7aad313b2999fe16ca68feb661a2
Reporting entity
- Name
- AFNI, INC.norm: afni
- Domain
- afni.com
Victim entity
- Name
- AFNI, INC.norm: afni
- Domain
- afni.com
Incident
- Discovered
- Jun 2, 2022
- Materiality determined
- —
- Notification sent
- Jul 11, 2022
- Affected individuals
- 261,449
- Data types
- IDENTITY_BASICFINANCIAL_ACCOUNT
- Attack vector
- Ransomware
- MITRE ATT&CK
- T1486 Data Encrypted for Impact
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
Compliance
- Time to disclose
- 6 weeks(39 days from discovery to filing)
- Compliance flags
- ME AG >30d · 39d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jun 2, 2022→ Filed with AG: Jul 11, 202239d 30 days (soft) ME AG >30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.