HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedPIICREDENTIALSFINANCIALLowContained
WealthKeel LLC
bd_2f9aa68c7b7ac53c · schema v1 · pii pii-v1
Full breach record for WealthKeel LLC →On November 7, 2025, WealthKeel LLC discovered unauthorized access to an employee email account, potentially exposing personal information including Social Security Numbers, account numbers, names, addresses, and email addresses. Four Maine residents were among 74 total individuals affected. WealthKeel engaged cybersecurity experts, notified law enforcement, and offered one year of IDX identity protection services to affected individuals.
Maine clockDiscovered Nov 7, 2025 → Filed with AG Feb 9, 202694d ✗ ME AG >90d13 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed4 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/860c8162-a095-41b7-8a47-86c9e638c56b.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 9, 2026
- Raw hash
- 6fee204406e06a66be940cd15af89c386b37822af494c1581afbfec7440b2694
Reporting entity
- Name
- WealthKeel LLCnorm: wealthkeel
- Domain
- wealthkeel.com
- Industry
- Financial Services
Victim entity
- Name
- WealthKeel LLCnorm: wealthkeel
- Domain
- wealthkeel.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Nov 7, 2025
- Materiality determined
- —
- Notification sent
- Feb 10, 2026
- Affected individuals
- 4
- Data types
- PIICREDENTIALSFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified law enforcement and relevant regulatory authorities
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(94 days from discovery to filing)
- Compliance flags
- ME AG >90d · 94dME resident >60d · 95d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Nov 7, 2025→ Filed with AG: Feb 9, 202694d 90 days ME AG >90d Maine Discovered: Nov 7, 2025→ Notified: Feb 10, 202695d 60 days (analyst band; statutory cap is 30 days) ME resident >60d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.