HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPHIHealth (basic)HighContained

Futurity First Insurance Group

bd_eec2ae1698b91748 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 11, 2024

Filed

Aug 30, 2024

To disclose

33 weeks

Affected

1,400state residents only

Linked

7 filings

Confidence

69%

Full breach record for Futurity First Insurance Group →3 incidents on file

Futurity First Insurance Group reported a cyberattack involving unauthorized access to nine email accounts (3 employees, 6 agents). The breach affected 1,400 Washington residents, exposing names, SSNs, driver's license numbers, dates of birth, health insurance info, and financial account numbers. Notices were mailed starting July 24, 2024. FFIG offered one year of Experian credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock✗ WA AG >90d33 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 48 days

discovery → filing · 33 weeks / 232 days

Nov 24, 2023

Begins

Jan 11, 2024

Discovered

Aug 30, 2024

Filed

vs. sector median

+25 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_92559198b69f81442024-08-30Verified
Oregon State AGbd_9f8b6503bd07d30b2024-08-30Verified
Maine State AGbd_044cd32ae9aa502d2024-07-24 · +37dCandidate
Montana State AGbd_8578b71e03428d992024-07-24 · +37dVerified

Show 2 more filings ↓up to 37d gap

New Hampshire State AGbd_b4e6fea3f7d62ad92024-07-24 · +37dVerified
Indiana State AGbd_be8c0ea1823948dd2024-07-24 · +37dVerified

Name: Futurity First Insurance Group
norm: futurity first insurance
Domain: futurity.org

Name: Futurity First Insurance Group
norm: futurity first insurance
Domain: futurity.org
Industry: Financial Servicesllm

Discovered: Jan 11, 2024
Breach occurred: Nov 24, 2023 – Jan 11, 2024
Undetected for: 48 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 24, 2024
Affected individuals: 1,400state-resident count only
Data types: Identity (basic)Government IDFinancial accountPHI
Data elements: NameSocial Security numberDriver's licence numberFinancial account numberDate of birthHealth insurance IDMedical information
WA-stated cause: Cyberattack
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoingContained same day
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Initial access: valid_credentials

During the incident: Completed an investigation of suspicious activity associated with three employee and six independent agent email accounts
Searched the contents of all of the email accounts
Located contact information for individuals whose information may have been subject to unauthorized access
Worked with the independent agents to send notices on their behalf
Mailed notice letters to affected individuals
Offered one year of complimentary credit monitoring, fraud consultation, and identity theft restoration services through Experian
Changes made: Taken and will continue to take steps to enhance the security of its email environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 33 weeks(232 days from discovery to filing)
Compliance flags: WA AG >90d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Maine State AGJul 24 · first

Montana State AGJul 24 · first

New Hampshire State AGJul 24 · first

Indiana State AGJul 24 · first

California State AG+37d

Oregon State AG+37d

Washington State AG+37d · this page

Pattern: first filing Jul 24 (ME), last Aug 30 (WA) — a 37-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachA30405.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 30, 2024
Raw hash: 528d0c2d4103424b8760c9a97777e8e72588e275c1d8f1f058cabdd64c095ece

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityFuturity First Insurance Group

Victim entityFuturity First Insurance Group

Incidentdiscovered Jan 11, 2024

Stated responseCompleted an investigation of suspicious activity associated with three employee and six independent agent email accounts

ComplianceWA AG >90d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com