HackingFinancial ServicesFinanceCustomer Data InvolvedData ExfiltratedIdentity (basic)Financial accountFinancial credentialsLow

WBI INVESTMENTS, LLC

bd_059bc089b61d1915 · schema v1 · pii pii-v1

Severity

Low

Discovered

Nov 24, 2022

Filed

Dec 10, 2022

To disclose

16 days

Affected · nationwide

2582 in this filing

Linked

4 filings

Confidence

65%

Full breach record for WBI INVESTMENTS, LLC →

WBI Investments, a financial services company, experienced an external system breach between July 1, 2022, and July 7, 2022. The breach was discovered on November 24, 2022, and affected 258 individuals. The compromised information included names and financial account numbers with associated access codes or passwords. The company provided written notification to affected individuals on December 13, 2022, and offered complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Nov 24, 2022 → Filed with AG Dec 10, 202216d ✓ ME AG ≤30d16 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 146 days

discovery → filing · 16 days

Jul 1, 2022

Begins

Nov 24, 2022

Discovered

Dec 10, 2022

Filed

vs. sector median

6 wks faster

This filing is one of 4 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Massachusetts State AGbd_a3311c830347067c2022-12-10Verified
Indiana State AGbd_666b7592cdf1504e2022-12-13 · +3dVerified
New Hampshire State AGbd_db288d4ac3ab82a52022-12-15 · +5dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: WBI INVESTMENTS, LLC
norm: wbi investments
Industry: Financial Servicesllm

Discovered: Nov 24, 2022
Breach occurred: Jul 1, 2022 – Jul 7, 2022
Undetected for: 146 daysoccurrence → discovery
Materiality determined: —
Notification sent: Dec 13, 2022
Affected individuals: 258state + nationwide
Data types: Identity (basic)Financial accountFinancial credentials
Data elements: Financial account number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Sent written notification to affected consumers.
Offered identity theft protection services.
Changes made: Complimentary credit monitoring if SSN impacted.
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 days(16 days from discovery to filing)
Compliance flags: ME AG ≤30d · 16d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Nov 24, 2022
→ Filed with AG: Dec 10, 2022
16d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Nov 24, 2022 → Filed with AG: Dec 10, 2022	16d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGDec 10 · first

Maine State AGDec 10 · first · this page

Indiana State AG+3d

New Hampshire State AG+5d

Pattern: first filing Dec 10 (MA), last Dec 15 (NH) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/d7fe8c2a-ef38-47c3-838a-48eabcc9cb7e.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Dec 10, 2022
Raw hash: f579f768250b71c1dd40ebd29d2941f43a182ee711aa76e0f890aef287e6ee57

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityWBI INVESTMENTS, LLC

Incidentdiscovered Nov 24, 2022

Stated responseSent written notification to affected consumers.

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov