Financial Asset Management Systems
Disclosed Sep 29, 20232 years ago164,796 affectedConfirmed
The business associate (BA), Financial Asset Management Systems, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 164,796 individuals. The PHI involved included names and claims and financial information. The BA notified HHS, affected individuals, the media, and posted substitute notice on its website. In response to the breach, the BA provided complimentary credit monitoring services and implemented additional administrative, technical, and security safeguards to better protect PHI.
What is known
| People affected | 164,796 (as reported to HHS) |
|---|---|
| Disclosed | Sep 29, 2023 |
| Happened | Mar 31, 2023 |
| Attack | Hacking |
| Data exposed | Names, Health |
| Sector | Finance · US |
| Status | Confirmed |
Sources
| Source | |
|---|---|
| California Attorney General breach notice: Financial Asset Management Systemsoag.ca.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-09-29 Financial Asset Management Systems Data Breach Notice to Consumersago.vermont.gov · Official notice | Official notice |
| Vermont Attorney General: 2023-10-31 Financial Asset Management Systems Data Breach Notices to Consumersago.vermont.gov · Official notice | Official notice |
| Indiana Attorney General 2023 data breach report: Financial Asset Management Systemsin.gov · Official notice | Official notice |
| HHS OCR breach report (archive, resolved): Financial Asset Management Systems (Business Associate, GA)ocrportal.hhs.gov · Official notice | Official notice |
Notices filed
| Where | Filed | People |
|---|---|---|
| California AGresidents of CA | Sep 29, 2023 | |
| Vermont AGresidents of VT | Sep 29, 2023 | |
| Indiana AGresidents of IN | Sep 29, 2023 | 322 |
| Vermont AGresidents of VT | Oct 31, 2023 | |
| HHS archivetotal | Nov 4, 2023 | 164,796 |
History of this record
- 2026-09-25 · attack: unknown to hacking · backfill source
- 2026-09-25 · data_types: [] to ["names","health"] · backfill source
- 2026-09-25 · records_basis: organization to hhs · backfill source
- 2026-09-25 · records: 10162 to 164796 · backfill source
- 2026-09-25 · summary: empty to The business associate (BA), Financial Asset Management Systems, reported that it experienced a ransomware incident that affected the protected health information (PHI) of 164,796 individuals. The PHI involved included names and claims and · backfill source
- 2026-09-25 · records_basis: empty to organization · backfill source
- 2026-09-25 · records: empty to 10162 · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-09-29-financial-asset-management-systems-data-breach-notice-consumers · backfill source
- 2026-09-25 · source: empty to https://ago.vermont.gov/document/2023-10-31-financial-asset-management-systems-data-breach-notices-consumers · backfill source
- 2026-09-25 · added · backfill source
First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.