DisclosureLens
HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedPIIFinancial accountMediumContained

LPL FINANCIAL LLC

bd_035fe324c7a65d90 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Nov 30, 2018

To disclose

—

Affected

2,636state residents only

Linked

9 filings

Confidence

66%
Full breach record for LPL FINANCIAL LLC →37 incidents on file

LPL Financial LLC submitted a supplemental notification to the New Hampshire Attorney General regarding a data security incident involving its third-party service provider, Capital Forensics, Inc. (CFI). LPL mailed notification letters to 2,526 NH residents initially, with an additional 110 letters mailed subsequently (total 2,636 NH residents). The incident involved potentially accessed data files on CFI's system. LPL provided credit monitoring and identity protection services for two years.

Incident timeline — partial

? — ?

Breach window unknown

Nov 30, 2018

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 9 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (8) · sorted by filing gap

Show 4 more filings ↓up to 54d gap

Filing propagation · 9 filings · 7 states

View merged incident ↗
Massachusetts State AGNov 16 · first
Washington State AGNov 16 · first
Oregon State AG+1d
California State AG+1d
New Hampshire State AG+3d
South Carolina State AG+3d
New Hampshire State AG+14d · this page
Montana State AG+62d
New Hampshire State AG+68d

Pattern: first filing Nov 16 (MA), last Jan 23 (NH) — a 68-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.