HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountIdentity (basic)Government IDPCIMediumContained

INDEPENDENT SOLUTIONS

bd_3334f22afab2c494 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 9, 2026

Filed

Aug 7, 2026

To disclose

29 days

Affected

10state residents only

Linked

3 filings

Confidence

66%

Full breach record for INDEPENDENT SOLUTIONS →

Independent Solutions Wealth Management, LLC notified Massachusetts residents that a strategic partner/vendor experienced a data incident. On July 9, 2026, the company identified suspicious activity and determined an unauthorized actor gained access to a single system within their network via the vendor. Potentially affected information includes names, dates of birth, addresses, phone numbers, Social Security numbers, and account numbers. The company contained the incident, reset credentials, and is offering free identity monitoring.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA AG ≤30d29 days discovery → filing

Incident timeline

discovery → filing · 29 days

Jul 9, 2026

Discovered

Aug 7, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_5a4b7fc88b3212a02026-08-07Verified
New Hampshire State AGbd_07d7e27341a7d5ca2026-08-14 · +7dVerified

Name: The Independent
norm: the independent
Domain: independent.co.uk

Name: INDEPENDENT SOLUTIONS
norm: independent solutions
Domain: iswealthmanagement.com
Industry: Financial Servicesllm

Discovered: Jul 9, 2026
Materiality determined: —
Notification sent: —
Affected individuals: 10state-resident count only
Data types: Financial accountIdentity (basic)Government IDPCI
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified relevant government agencies of this Incident
Initial access: supply_chain

During the incident: Changed passwords
Proactively taking systems offline
Disabling remote access
Employing advanced security and detection software
Engaging cybersecurity and privacy professionals to assist in our response
Isolating the affected system
Rotating user credentials
Implementing additional security measures
Engaged data security and privacy professionals to aid in our response and notify affected individuals and relevant government agencies of this Incident
Changes made: Offering identity monitoring services through Kroll for free of charge
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 29 days(29 days from discovery to filing)
Compliance flags: MA AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Vermont State AGAug 7 · first

Massachusetts State AGAug 7 · first · this page

New Hampshire State AG+7d

Pattern: first filing Aug 7 (VT), last Aug 14 (NH) — a 7-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1310-independent-solutions-wealth-management-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 7, 2026
Raw hash: 4ba56bb7cbf9f5398e673327328107c080eb99f25a7c069ee16889e7b9206057

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityThe Independent

Victim entityINDEPENDENT SOLUTIONS

Incidentdiscovered Jul 9, 2026

Stated responseChanged passwords

ComplianceMA AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov