Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountMediumContained

Wanda L. Delgado

bd_34bddd5f03927728 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Dec 29, 2022

Filed

Apr 18, 2023

To disclose

16 weeks

Affected

1state residents only

Linked

2 filings

Confidence

66%

Full breach record for Wanda L. Delgado →

Wanda L. Delgado DBA Insight Financial Advisors notified individuals of a data security incident on April 18, 2023. Unauthorized access to a corporate email account was observed on December 29, 2022. Impacted data included names, addresses, SSNs, and financial account numbers. The company engaged forensic review, implemented MFA, and provided credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 16 weeks / 110 days

Dec 29, 2022

Begins

Dec 29, 2022

Discovered

Apr 18, 2023

Filed

vs. sector median

+8 wks slower

This filing is one of 2 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

California State AGbd_ecfb06e1b48f05c82023-04-18Verified

Name: Wanda L. Delgado
norm: wanda l delgado

Name: Wanda L. Delgado
norm: wanda l delgado
Also named: Wanda L. Delgadodba oflegal entity
Insight Financial Advisorsdba oftrade name
Industry: Financial Servicesllm

Discovered: Dec 29, 2022
Breach occurred: Dec 29, 2022
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 18, 2023
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Engaged a vendor to review the emails and documents contained in the email account
Changed the password for the corporate email account
Arranged for Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score/Cyber Monitoring services at no cost
Provided proactive fraud assistance through Cyberscout
Changes made: Implemented multi-factor authentication on all email accounts
Continuing to evaluate the appropriateness of security controls
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 16 weeks(110 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGApr 18 · first

Montana State AGApr 18 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-197.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 18, 2023
Raw hash: ddeee0cfc53b10f2e945cd4c0e470faf355b661d618021fbef6cb1b0967f9914

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityWanda L. Delgado

Victim entityWanda L. Delgado

Incidentdiscovered Dec 29, 2022

Stated responseEngaged a vendor to review the emails and documents contained in the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov