Frax Outsourcing
ent_98e16b79cce44555ec7ef236
Disclosures
6
State AG · 6 jurisdictions
Multi-filing incidents
1
incidents joining 2+ filings here
Max affected reported
12,005
nationwide · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Frax Outsourcing
- Normalized
- frax outsourcing— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (6)newest first
- Oregon State AGas victim2023-10-10
Frax Outsourcing, a subsidiary of TheKey, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-10-10. The breach occurred during 11/2/2022 - 11/15/2022. The breach was discovered on 6/19/2023. 12,005 individuals were affected. Notice was sent on 9/23/2023.
- California State AGas victim2023-10-10
Frax Outsourcing, a subsidiary of TheKey, LLC, experienced a criminal cyberattack between November 2 and November 15, 2022. The threat actor accessed email accounts and a SharePoint drive in a legacy system. The incident potentially exposed personally identifiable information, including names and other data elements, of affected individuals. Frax engaged third-party experts for investigation and has decommissioned the affected legacy environment. Identity theft protection services are being offered to affected individuals.
- New Hampshire State AGas victim2023-09-25
Frax Outsourcing, a subsidiary of TheKey, LLC, notified the New Hampshire Attorney General of a criminal cyberattack affecting a legacy system. Unauthorized access occurred between November 2 and 15, 2022. The incident was discovered on June 19, 2023, affecting 3 New Hampshire residents. PII was accessed, but no misuse was found. Frax decommissioned the legacy environment and offered identity theft protection services.
- Massachusetts State AGas victim2023-09-22
Frax Outsourcing, a subsidiary of TheKey, LLC reported a data breach to the Massachusetts Office of Consumer Affairs and Business Regulation. The breach was reported on 2023-09-22. 482 Massachusetts residents were affected. The report records the breach type as electronic.
- Montana State AGas victim2023-09-22
Frax Outsourcing, a subsidiary of TheKey, LLC, notified Montana residents of a criminal cyberattack impacting a legacy system. Unauthorized access occurred between Nov 2-15, 2022. The company determined on June 19, 2023, that PII (names, email) from affected email accounts and SharePoint drives was accessed. No evidence of misuse was found. The legacy environment was decommissioned, and identity protection services were offered.
- Maine State AGas victim2023-09-22
Frax Outsourcing, a subsidiary of TheKey, LLC, a healthcare organization, reported a data breach affecting 12,005 individuals, including one resident of Maine. The breach, described as an external system hack, occurred between November 2, 2022, and November 15, 2022, and was discovered on June 19, 2023. The compromised information includes names and Social Security numbers. Affected individuals were notified on September 23, 2023, and offered 12 months of identity theft protection and credit monitoring services through IDX.