The PenFacs Group
ent_9588d598b6480f525eb81343
Disclosures
3
State AG · 3 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
54
as filed · State AG MA
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- The PenFacs Group
- Normalized
- the penfacs— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- Montana State AGas victim2022-11-03
The PenFacs Group notified individuals of a data security incident where an email account was compromised via phishing on or around Nov 15, 2021. The attacker attempted a spam email campaign to obtain funds. Personal information was potentially accessed. The incident was discovered on Feb 23, 2022. The company engaged forensic experts, notified law enforcement, and offered credit monitoring.
- New Hampshire State AGas victim2022-09-30
The PenFacs Group notified the NH Attorney General of a phishing incident affecting 12 NH residents. Unauthorized access occurred around Nov 15, 2021, discovered Feb 23, 2022. Data exposed included SSNs, driver's licenses, financial accounts, and PHI. PenFacs engaged forensic experts, notified law enforcement, and provided 1 year of credit monitoring.
- Massachusetts State AGas victim2022-09-30
The PenFacs Group reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2022-09-30. 54 Massachusetts residents were affected. The report records the breach type as electronic.