HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Mariner Wealth Advisors, LLC

bd_042e1d26630afaf7 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2025

Filed

Jun 1, 2026

To disclose

27 weeks

Affected

Not disclosed

Linked

7 filings

Confidence

65%

Full breach record for Mariner Wealth Advisors, LLC →2 incidents on file

Mariner Wealth Advisors, LLC reported unauthorized access to three associates' cloud applications. The incident occurred between November 21, 2025, and January 13, 2026, and was detected on November 24, 2025. A criminal third party accessed the accounts and downloaded files containing personal information, including names, account numbers, dates of birth, and Social Security numbers. The company contained the incident, secured the accounts, and is offering 12 months of complimentary credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

California clockDiscovered Nov 24, 2025 → Notified May 29, 2026186d ✗ CA 60-day late27 weeks discovery → filing

Incident timeline

undetected · 3 days

discovery → filing · 27 weeks / 189 days

Nov 21, 2025

Begins

Nov 24, 2025

Discovered

Jun 1, 2026

Filed

vs. sector median

+19 wks slower

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Washington State AGbd_7b9c677fce6b96d22026-06-01Verified
Maine State AGbd_dc209b391466c5de2026-06-01Verified
New Hampshire State AGbd_fe3948411c5ce93d2026-06-01Verified
Massachusetts State AGbd_b1757d3f979464622026-06-02 · +1dCandidate

Show 2 more filings ↓up to 3d gap

Indiana State AGbd_01f2ddbfef6a94ce2026-05-29 · +3dVerified
Nebraska State AGbd_9cf755fca5b2e75e2026-05-29 · +3dVerified

Name: Mariner Wealth Advisors, LLC
norm: mariner wealth advisors

Name: Mariner Wealth Advisors, LLC
norm: mariner wealth advisors
Industry: Financial Servicesllm

Discovered: Nov 24, 2025
Breach occurred: Nov 21, 2025 – Jan 13, 2026
Undetected for: 3 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Communicating with federal law enforcement and regulatory authorities
Initial access: valid_credentials

During the incident: Initiated its incident response plan
Began containment measures
Isolated, secured, and analyzed affected accounts
Communicating with federal law enforcement and regulatory authorities
Engaged third-party experts to assist with investigation
Engaged third-party researchers to monitor websites and forums for data misuse
Secured the referenced cloud applications
Changes made: Emphasize cybersecurity awareness in employee training materials
Working with external advisors to fortify cybersecurity defenses
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(189 days from discovery to filing)
Compliance flags: CA 60-day late · 186dCA AG copy ≤15d · 3d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Nov 24, 2025
→ Notified: May 29, 2026
186d 60 days (analyst band, pre-2026 discoveries) CA 60-day late
California
Consumers notified: May 29, 2026
→ AG copy submitted: Jun 1, 2026
3d 15 calendar days CA AG copy ≤15d

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Nov 24, 2025 → Notified: May 29, 2026	186d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late
California	Consumers notified: May 29, 2026 → AG copy submitted: Jun 1, 2026	3d	15 calendar days	CA AG copy ≤15d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGMay 29 · first

Nebraska State AGMay 29 · first

Washington State AG+3d

Maine State AG+3d

New Hampshire State AG+3d

California State AG+3d · this page

Massachusetts State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-624233
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 1, 2026
Raw hash: 0dfcf231040fd24d9eb01f7b2a9e108d6392365134e8a0410f8b38d7fde82094

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMariner Wealth Advisors, LLC

Victim entityMariner Wealth Advisors, LLC

Incidentdiscovered Nov 24, 2025

Stated responseInitiated its incident response plan

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov