Frax Outsourcing
ent_98e16b79cce44555ec7ef236
Disclosures
3
State AG · 3 jurisdictions
Incidents
1
filings grouped by incident
Max affected reported
12,005
as filed · State AG OR
Leak-site claims
0
none in sample
Identity resolution
- Canonical name
- Frax Outsourcing
- Normalized
- frax outsourcing— dedupe via name-norm; Microsoft / MSFT collapse to one row
- GLEIF LEI
- No match
- SEC EDGAR CIK
- None — not an SEC registrant
- Domain
- None on record
Disclosure history (3)newest first
- 🦫Oregon State AGas victim2023-10-10
Frax Outsourcing, a subsidiary of TheKey, LLC reported a data breach to the Oregon Attorney General. The breach was reported on 2023-10-10. The breach occurred during 11/2/2022 - 11/15/2022. The breach was discovered on 6/19/2023. 12,005 individuals were affected. Notice was sent on 9/23/2023.
- 🐻California State AGas victim2023-10-10
Frax Outsourcing, a subsidiary of TheKey, LLC, experienced a criminal cyberattack between November 2 and November 15, 2022. The threat actor accessed email accounts and a SharePoint drive in a legacy system. The incident potentially exposed personally identifiable information, including names and other data elements, of affected individuals. Frax engaged third-party experts for investigation and has decommissioned the affected legacy environment. Identity theft protection services are being offered to affected individuals.
- 🦞Maine State AGas victim2023-09-22
Frax Outsourcing, a subsidiary of TheKey, LLC, a healthcare organization, reported a data breach affecting 12,005 individuals, including one resident of Maine. The breach, described as an external system hack, occurred between November 2, 2022, and November 15, 2022, and was discovered on June 19, 2023. The compromised information includes names and Social Security numbers. Affected individuals were notified on September 23, 2023, and offered 12 months of identity theft protection and credit monitoring services through IDX.