UnknownFinancial ServicesFinanceFinancial accountIdentity (basic)Government IDHigh

DRIVEWEALTH, LLC

bd_05223f0c5d38f06d · schema v1 · pii pii-v2

Severity

High

Discovered

Sep 4, 2026

Filed

Oct 13, 2026

To disclose

6 weeks

Affected

358,104state residents only

Linked

7 filings

Confidence

95%

Full breach record for DRIVEWEALTH, LLC →

DriveWealth, LLC, a finance sector entity reported a unauthorized access incident to the Washington Attorney General. The organization became aware of the incident on 2026-09-04 and filed notice on 2026-10-13. 358,104 Washington residents were affected. 39 days elapsed between awareness and notification. 0 days to identify the breach. 1 days to contain the breach.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

discovery → filing · 6 weeks / 39 days

Sep 4, 2026

Discovered

Oct 13, 2026

Filed

vs. sector median

3 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Texas State AGbd_28bb5fc180c0b90a2026-10-02 · +11dVerified
Massachusetts State AGbd_cdc9f273200ddbc82026-10-01 · +12dVerified
California State AGbd_b38a2f757806b77b2026-09-30 · +13dCandidate
South Carolina State AGbd_389a513f4e27d1032026-09-29 · +14dVerified

Show 2 more filings ↓up to 14d gap

Iowa State AGbd_4073e70b3c0460912026-09-29 · +14dVerified
Delaware State AGbd_e1476c56dcc944132026-09-29 · +14dVerified

Name: DRIVEWEALTH, LLC
norm: drivewealth

Name: DRIVEWEALTH, LLC
norm: drivewealth
Industry: Financial Servicesllm

Discovered: Sep 4, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 358,104state-resident count only
Data types: Financial accountIdentity (basic)Government ID
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle 1-99dexposure 1-99d
WA-stated discovery: Found while ongoing
Attack vector: Unknown

Time to disclose: 6 weeks(39 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

South Carolina State AGSep 29 · first

Iowa State AGSep 29 · first

Delaware State AGSep 29 · first

California State AG+1d

Massachusetts State AG+2d

Texas State AG+3d

Washington State AG+14d · this page

Pattern: first filing Sep 29 (SC), last Oct 13 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://data.wa.gov/resource/sb4j-ca4h.json?id=25855
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 13, 2026
Raw hash: 2ce0355de2b2a5b450f9502408081af524c5776a9a0e7f16f6a509658597dc49

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityDRIVEWEALTH, LLC

Victim entityDRIVEWEALTH, LLC

Incidentdiscovered Sep 4, 2026

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenancedata.wa.gov