HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancialHighContained

THE EDELMAN FINANCIAL ENGINES CENTER, LLC

bd_1aa0940ef60364b6 · schema v1 · pii pii-v1

Severity

High

Discovered

Jan 8, 2026

Filed

Feb 4, 2026

To disclose

27 days

Affected · nationwide

5,0835 in this filing

Linked

7 filings

Confidence

66%

Full breach record for THE EDELMAN FINANCIAL ENGINES CENTER, LLC →

Edelman Financial Engines, LLC reported a data breach occurring on January 7, 2026, affecting 5,083 individuals, including 5 Maine residents. An unauthorized third party accessed personal information including names, SSNs, DOBs, addresses, and financial planning data. The incident was detected on January 8, 2026. Affected individuals were notified on January 28, 2026, and offered 24 months of credit monitoring via Kroll.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jan 8, 2026 → Filed with AG Feb 4, 202627d ✓ ME AG ≤30d27 days discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 1 days

discovery → filing · 27 days

Jan 7, 2026

Begins

Jan 8, 2026

Discovered

Feb 4, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_789ad137708c3ca52026-02-04Candidate
Vermont State AGbd_7ed7d43cfbd3ccbd2026-02-04Verified
Massachusetts State AGbd_efdd59e2dc0fcabe2026-02-05 · +1dVerified
New Hampshire State AGbd_d0f61c316195a5fe2026-02-09 · +5dVerified

Show 2 more filings ↓up to 7d gap

Indiana State AGbd_088eccf424942d292026-01-28 · +7dVerified
Nebraska State AGbd_6b00116a4180fd792026-01-28 · +7dVerified

Name: THE EDELMAN FINANCIAL ENGINES CENTER, LLC
norm: the edelman financial engines center
Domain: edelmanfinancialengines.com
Industry: Financial Services

Name: THE EDELMAN FINANCIAL ENGINES CENTER, LLC
norm: the edelman financial engines center
Domain: edelmanfinancialengines.com
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Jan 8, 2026
Breach occurred: Jan 7, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jan 28, 2026
Affected individuals: 5,083state + nationwide
Data types: Identity (basic)Government IDFinancial
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Filed notification with Maine Attorney General
Initial access: valid_credentials

During the incident: Promptly terminated the unauthorized access
Investigated the unauthorized activity with the support of external security experts
Arranged for enhanced credit and identity monitoring services at no cost for 24 months via Kroll
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 days(27 days from discovery to filing)
Compliance flags: ME AG ≤30d · 27d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jan 8, 2026
→ Filed with AG: Feb 4, 2026
27d 30 days ME AG ≤30d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jan 8, 2026 → Filed with AG: Feb 4, 2026	27d	30 days	ME AG ≤30d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJan 28 · first

Nebraska State AGJan 28 · first

California State AG+7d

Vermont State AG+7d

Maine State AG+7d · this page

Massachusetts State AG+8d

New Hampshire State AG+12d

Pattern: first filing Jan 28 (IN), last Feb 9 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/97ec751a-20ee-4ea8-bbac-a7bc2c8e8381.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 4, 2026
Raw hash: b8d867f7171834c9855fae1ff6c9901f4d2503ab94553196c8124bf9ba6e09c4

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTHE EDELMAN FINANCIAL ENGINES CENTER, LLC

Victim entityTHE EDELMAN FINANCIAL ENGINES CENTER, LLC

Incidentdiscovered Jan 8, 2026

Stated responsePromptly terminated the unauthorized access

ComplianceME AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov