HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Tomren Wealth Management

bd_0736638a3e785341 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 7, 2013

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for Tomren Wealth Management →

Tomren Wealth Management reported that between February 21 and March 6, 2013, an unauthorized third party accessed a server containing client personal information, including names, Social Security numbers, driver's license information, and FSC broker account numbers. The attacker loaded spamming software in a failed attempt to send junk emails. The firm engaged forensic examiners, upgraded firewalls, changed passwords, and offered two years of identity protection via AllClear ID.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 21, 2013

Begins

May 7, 2013

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Tomren Wealth Management
norm: tomren wealth management
Domain: tomrenwealth.com

Name: Tomren Wealth Management
norm: tomren wealth management
Domain: tomrenwealth.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Feb 21, 2013 – Mar 6, 2013
Materiality determined: —
Notification sent: Apr 25, 2013
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Began investigating the incident as soon as we learned of it
Hired forensic examiners to ensure the system is and will be free of threats
Upgraded the firewall
Changed all passwords
Deleted certain applications
Arranged for identity protection from AllClear ID at no cost
Changes made: Upgraded the firewall
Changed all passwords
Deleted certain applications
Hired forensic examiners to ensure the system is and will be free of threats
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-41702
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2013
Raw hash: 9e7e2033805627407a61733d19a6b846e6e86d34ffaed3ba2c20871b9ab9ad37

Reporting entityTomren Wealth Management

Victim entityTomren Wealth Management

IncidentUnauthorized Access

Stated responseBegan investigating the incident as soon as we learned of it

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov