HackingFinancial ServicesProfessional ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Hoover Financial Consulting, Inc.

bd_24ffc4d3835a184f · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jun 13, 2025

Filed

Sep 19, 2025

To disclose

14 weeks

Affected

4state residents only

Linked

2 filings

Confidence

66%

Full breach record for Hoover Financial Consulting, Inc. →

Hoover Financial Consulting, Inc. notified Montana residents of a data breach where an unknown actor accessed client portal data via unauthorized credentials starting May 21, 2025. The incident, discovered June 13, 2025, exposed names, SSNs, DOBs, and financial account numbers. The company engaged forensic specialists, secured systems, and offered 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 23 days

discovery → filing · 14 weeks / 98 days

May 21, 2025

Begins

Jun 13, 2025

Discovered

Sep 19, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_50256d85e588ef742025-09-19Verified

Name: Hoover Financial Consulting, Inc.
norm: hoover financial consulting

Name: Hoover Financial Consulting, Inc.
norm: hoover financial consulting
Industry: Financial ServicesllmProfessional Servicesllm

Discovered: Jun 13, 2025
Breach occurred: May 21, 2025
Undetected for: 23 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 19, 2025
Affected individuals: 4state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Notice has not been delayed by law enforcement
Initial access: valid_credentials

During the incident: Took steps to secure the system
Launched an investigation with the assistance of a third-party specialist
Conducted a detailed review of the files involved
Offering immediate access to credit monitoring and identity theft protection services for twelve (12) months at no cost through IDX
Changes made: Reviewing existing security policies
Implemented additional cybersecurity measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 14 weeks(98 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGSep 19 · first

Montana State AGSep 19 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/09/Consumer-notification-letter-53.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 19, 2025
Raw hash: cc327a287b6e44bff090cbcdf9ee5799b872371fc2662c21ae1411d27840a511

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityHoover Financial Consulting, Inc.

Victim entityHoover Financial Consulting, Inc.

Incidentdiscovered Jun 13, 2025

Stated responseTook steps to secure the system

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov