B. Riley Financial, Inc Discloses Material Cybersecurity Incident (SEC 8-K)
If you are a client of B. Riley Financial, Inc, here’s what’s now in circulation.
  On April 5, 2024, Targus International, LLC and certain affiliates (collectively, "Targus"), each of which is an indirect subsidiary of B. Riley Financial, Inc. (the "Company"), discovered that a threat actor gained unauthorized access to certain of Targus' file systems. Upon discovery and with assistance from external cybersecurity counsel and consultants, Targus immediately activated its incident response and business continuity protocols to investigate, contain and remediate the incident. Through this process, proactive containment measures to disrupt unauthorized access resulted in
On April 5, 2024, B. Riley Financial, Inc. filed an SEC 8-K disclosing that a threat actor had gained unauthorized access to certain file systems belonging to its indirect subsidiary Targus International, LLC and affiliates. The filing marks the first public notification of the incident, which Targus discovered on the same day. Anyone whose personal or business documents were stored on those systems may now face long-term exposure.
Watch B. Riley Financial, Inc
Get alerted the next time B. Riley Financial, Inc files a breach with any US regulator — the filing, dated and sourced. A free single-company slice of Signals; no account needed.
We’ll email you only about B. Riley Financial, Inc’s future breach filings and how to watch a whole vendor list — not general marketing. Unsubscribe any time.
Watching your whole vendor list (50 to 500 companies, by tier) is GalaxyWarden Signals — $499/mo or $4,990/yr (indicative estimate).
Details from the SEC Filing
The SEC 8-K Item 1.05 states that on April 5, 2024, Targus identified unauthorized access to portions of its file systems. The company immediately engaged external cybersecurity counsel and consultants, activated incident response and business continuity protocols, and implemented proactive containment measures that disrupted the unauthorized access. The disclosure does not specify the volume of data involved, the exact data types accessed, or whether any information was exfiltrated. It also does not name the threat actor or confirm any ransom demand.
April 5, 2024 remains the sole date tied to both discovery and public disclosure. The filing frames the event as a “material cybersecurity incident” under SEC rules, obligating the parent company to report it to investors.
Why This Matters for You and Your Family
When a company that handles logistics, warranties, or consumer-product support suffers a breach, the files on its systems often contain names, addresses, contact details, purchase records, and sometimes scanned documents provided by customers. Even if the exact contents remain unknown, the unauthorized file-system access creates a realistic risk that information tied to you or your family has been viewed or copied. Once that data leaves a corporate environment it can appear on dark-web markets, ransomware leak sites, or private extortion lists months later.
Ordinary families who bought laptop bags, phone cases, or other Targus products and registered them for warranty support may have their details caught in this incident. The same risk applies to small businesses that interacted with Targus as a vendor. Without clear visibility into what was taken, the safest assumption is that any information you ever gave them could now be in unauthorized hands.
Doxxing and Identity-Chain Risks
File-system breaches rarely stop at one dataset. Threat actors routinely chain exposed customer records with usernames, email addresses, or phone numbers already circulating from earlier leaks. A single address or warranty claim can link your work identity, children’s school-related accounts, and family gaming profiles. These connections allow attackers to build detailed dossiers used for spear-phishing, SIM-swapping, or targeted extortion.
Credential reuse across services turns this incident into a gateway for account takeovers. If you reused a password listed in the Targus environment, criminals who obtain even partial data can test it against email, banking, or social-media accounts. Gaming accounts belonging to children are especially vulnerable because they often share the same household email or phone number, creating a direct path from corporate breach to family doxxing.
What to Do
- Run a DoxxScan to map every link between your handles, emails, phone numbers, and real identity, then use the cleanup of Warden to remove what you can.
- Rotate any password you ever used on Targus-related sites or services and enable 2FA through an authenticator app rather than SMS.
- Enable continuous DoxxScan monitoring across 13.1B+ breach records and 100+ platforms so the next exposure surfaces in hours instead of months.
- Cover the entire household with DoxxScan family protection, which includes dependents and children’s gaming accounts that often chain back to the same address or parent email.
- Let remediation specialists handle ongoing takedown requests for any personal records that surface on data-broker or extortion sites.
The incident underscores that even well-known subsidiaries can become entry points for threat actors, and families rarely learn about the exposure until it is too late. A forward-looking approach means treating every corporate breach as a personal one and acting before the data appears for sale. Start your DoxxScan trial and combine its continuous monitoring, AI-powered identity-chain mapping, and hands-on specialist remediation to protect yourself and your family today.
What the free scan actually returns
Found on people-search siteswe remove these
These listings are live, public, and legal to remove — and removing them is what we do.
Found in breach recordsverifiedreported — unverified
Each record is labeled: confirmed breach data, or an attacker’s claim no one has verified.
Leaked data cannot be deleted from the internet — anyone claiming otherwise is lying. Broker listings can be removed. We do the second, and show you exactly what to fix from the first.
Report details & sourcing
Related breaches
Punch & Associates Investment Management, Inc. Data Breach Notice (Vermont Attorney General)
Punch & Associates Investment Management, Inc. notified Vermont residents of a data breach in a fili…
Castle Management, LLC Data Breach Notice (Vermont Attorney General)
Castle Management, LLC notified Vermont residents of a data breach in a filing reported to the Vermo…
Ocean Edge Resort and Golf Club Data Breach Notice (Vermont Attorney General)
Ocean Edge Resort and Golf Club notified Vermont residents of a data breach in a filing reported to …