BBX CAPITAL CORPORATION

BBX Capital Corporation reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2019-07-09. 1 Massachusetts residents were affected. The report records the breach type as electronic.

BBX Capital Corporation notified Montana residents of a security incident where suspicious emails containing malware were sent from employee accounts. Unauthorized access to email accounts occurred March 26-28, 2019. Personal information stored in emails was potentially exposed. BBX engaged forensic consultants and provided 12 months of identity monitoring via Kroll.

BBX Capital Corporation notified the NH Attorney General of a security incident involving unauthorized access to employee email accounts. The incident began on March 26, 2019, with suspicious emails containing malware sent from compromised accounts. Unauthorized logons occurred between March 26 and March 28, 2019. BBX changed passwords on March 28, 2019, to contain the breach. Forensic investigations could not determine if personal information was accessed, but one New Hampshire resident's data (name, address, SSN, financial account info) was potentially exposed. BBX offered 12 months of credit monitoring.