Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Portfolio Strategy
bd_2a99d1d240540ea9 · schema v1 · pii pii-v1
Full breach record for Portfolio Strategy →The Portfolio Strategy Group, LLC reported a data security incident to the New Hampshire Attorney General. On May 8, 2025, the company detected unusual activity on an employee's email account, likely due to phishing. An unauthorized individual accessed emails containing personal information, including names, addresses, SSNs, and financial account data. One New Hampshire resident was affected. The company engaged forensic investigators, reset passwords, and offered credit monitoring services.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/portfolio-strategy-group-20250630.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 30, 2025
- Raw hash
- c976c2ab882fb92e9d3e237e4f96f7743cef25db9f3e16ea1f55fa663d331dec
Reporting entity
- Name
- Portfolio Strategynorm: portfolio strategy
- Domain
- portfoliostrategy.com
Victim entity
- Name
- Portfolio Strategynorm: portfolio strategy
- Domain
- portfoliostrategy.com
Incident
- Discovered
- May 8, 2025
- Materiality determined
- Jun 5, 2025
- Notification sent
- Jun 25, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing LinkT1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified New Hampshire Department of Justice
- Initial access
- phishing_link
Compliance
- Time to disclose
- 8 weeks(53 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.