HackingStolen CredentialsTargetedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Wealth Enhancement Group, LLC
bd_27a1e75441f137d2 · schema v1 · pii pii-v1
Full breach record for Wealth Enhancement Group, LLC →Wealth Enhancement Group notified consumers of a cybersecurity incident affecting a standalone server in an advisor office. Unauthorized access occurred around April 24, 2023. Data potentially accessed included names, SSNs, driver's licenses, and financial account numbers. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.
Vermont clock⏱ VT AG >14 bday9 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 4 about the same incident.View merged incident
A leak claim by raworld about this victim predates this filing by 62 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (3) · sorted by filing gap
- bd_f2d797857b074c35Maine State AGfiled 2023-06-29(1d gap)Verified
- bd_09230b175b676986Montana State AGfiled 2023-06-27(1d gap)Candidate
- bd_df9c436a305a1e36New Hampshire State AGfiled 2023-07-05(7d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2023-06-28-wealth-enhancement-group-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 28, 2023
- Raw hash
- eddae4af3d58387e83b9e01fe6ce175054c5828ab39bc726b93da048ef3359cf
Reporting entity
- Name
- Wealth Enhancement Group, LLCnorm: wealth enhancement
- Domain
- wealthenhancement.com
Victim entity
- Name
- Wealth Enhancement Group, LLCnorm: wealth enhancement
- Domain
- wealthenhancement.com
Incident
- Discovered
- Apr 26, 2023
- Materiality determined
- —
- Notification sent
- Jun 28, 2023
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
- Regulator citations
- Notified law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 9 weeks(63 days from discovery to filing)
- Compliance flags
- VT AG >14 bdayLeak >30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.