HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumActive
EP WEALTH ADVISORS, LLC
bd_31fe71c797514b43 · schema v1 · pii pii-v1
Full breach record for EP WEALTH ADVISORS, LLC →EP Wealth Advisors, LLC reported a cybersecurity incident to the New Hampshire Attorney General on March 5, 2026. On February 2, 2026, unauthorized access was gained via compromised employee credentials. The attacker accessed client data, including names, SSNs, and financial account numbers, for approximately four hours. 277 New Hampshire residents were affected. EP Wealth engaged forensic experts, notified law enforcement, and is offering 24 months of credit monitoring. The investigation is ongoing.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_8762b96149478f64Oregon State AGfiled 2026-03-06(1d gap)Verified by operator
- bd_704b38056d41865bIndiana State AGfiled 2026-03-10(5d gap)Verified by operator
- bd_8a899a7cf01b15eeWashington State AGfiled 2026-03-21(16d gap)Verified by operator
- bd_a69ffa0aa6aa4f05Texas State AGfiled 2026-03-23(18d gap)Verified by operator
Show 1 more filing ↓Show fewer ↑up to 31d gap
- bd_7337e131d5c5abd8California State AGfiled 2026-02-02(31d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ep-wealth-20260305.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 5, 2026
- Raw hash
- 0332ac1545673dd6d0cb2f60a8be8048a07099dc42d83196ecec15e91e4c3ff0
Reporting entity
- Name
- EP WEALTH ADVISORS, LLCnorm: ep wealth advisors
Victim entity
- Name
- EP WEALTH ADVISORS, LLCnorm: ep wealth advisors
Incident
- Discovered
- Feb 2, 2026
- Materiality determined
- —
- Notification sent
- Mar 6, 2026
- Affected individuals
- 277
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1119 Automated Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- reported the incident to law enforcement
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 4 weeks(31 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.