HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDPIIMediumResolved

OPPENHEIMERFUNDS, INC.

bd_267c5caa5c72cd78 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 8, 2015

Filed

Jan 20, 2015

To disclose

12 days

Affected

102state residents only

Linked

2 filings

Confidence

63%

Full breach record for OPPENHEIMERFUNDS, INC. →7 incidents on file

Oppenheimer Funds notified shareholders that a brokerage firm partner erroneously made accessible account numbers and SSNs during Jan 25, 2014 - Jan 8, 2015. The issue was resolved, and credit monitoring was offered.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 348 days

discovery → filing · 12 days

Jan 25, 2014

Begins

Jan 8, 2015

Discovered

Jan 20, 2015

Filed

vs. sector median

8 wks faster

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_aa2533d170bd09162015-01-15 · +5dCandidate

Name: OPPENHEIMERFUNDS, INC.
norm: oppenheimerfunds
Domain: oppenheimerfunds.com

Name: OPPENHEIMERFUNDS, INC.
norm: oppenheimerfunds
Domain: oppenheimerfunds.com
Industry: Financial Servicesllm

Discovered: Jan 8, 2015
Breach occurred: Jan 25, 2014 – Jan 8, 2015
Undetected for: 348 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 9, 2015
Affected individuals: 102state-resident count only
Data types: Identity (basic)Government IDPII
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: Partner
Initial access: valid_credentials

During the incident: Resolved the issue that caused this error
Offering credit protection that is available to you through Equifax Consumer Services, LLC at our expense
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 days(12 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJan 15 · first

South Carolina State AG+5d · this page

Pattern: first filing Jan 15 (CA), last Jan 20 (SC) — a 5-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://consumer.sc.gov/sites/consumer/files/Documents/Business%20Resources%20Laws/Related%20Laws/Breaches/2015/OppenheimerFunds.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 20, 2015
Raw hash: f2af63458dd57daa4647a5fcb5e298208f089f3b038795e44b7c2d05b3f15b28

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityOPPENHEIMERFUNDS, INC.

Victim entityOPPENHEIMERFUNDS, INC.

Incidentdiscovered Jan 8, 2015

Stated responseResolved the issue that caused this error

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceconsumer.sc.gov