HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedIdentity (basic)Government IDMediumActive

Vanguard

bd_34f99a0a1b7ccc3f · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 7, 2024

To disclose

—

Affected

1state residents only

Linked

16 filings

Confidence

66%

Northwestern Mutual notifies Montana residents of a cybersecurity incident involving a vendor used by Vanguard, a third-party provider for nonqualified deferred compensation plans. Vanguard engaged forensic investigators. Data potentially impacted includes names, addresses, DOBs, and SSNs. No evidence yet that Northwestern Mutual or Vanguard plan data was specifically affected. Identity protection services offered.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 7, 2024

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 16 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Indiana State AGbd_2f40c7ba9b1e8a512024-02-16 · +9dVerified
Massachusetts State AGbd_33933653706e0f642024-02-16 · +9dVerified
Maine State AGbd_569adbdb9e453b182024-02-16 · +9dVerified
Montana State AGbd_fa687827ad46b0a52024-02-16 · +9dVerified

Show 6 more filings ↓up to 30d gap

Montana State AGbd_3c2a297f228ab4702024-02-29 · +22dVerified
Maine State AGbd_604c26d3099e3fe92024-02-29 · +22dVerified
Massachusetts State AGbd_bfc4408712b72fa62024-02-29 · +22dVerified
Oregon State AGbd_f32704b1d1b017c12024-02-29 · +22dVerified
Indiana State AGbd_7f405322cd8b7cd62024-03-01 · +23dVerified
New Hampshire State AGbd_c86992b6fc6b6a8c2024-03-08 · +30dVerified

Showing first 10 of 15 linked disclosures.

Name: The Northwestern Mutual Life Insurance Company
norm: the northwestern mutual life insurance
Domain: northwesternmutual.com

Name: Vanguard
norm: vanguard
Domain: northwesternmutual.com
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1195 Supply Chain Compromise
Threat actor: External
Initial access: supply_chain

During the incident: Engaged cybersecurity firms to assist with forensic investigation
Offered complimentary one-year identity protection package through Experian
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 6 states

View merged incident ↗

Montana State AGFeb 7 · first · this page

Indiana State AG+9d

Massachusetts State AG+9d

Maine State AG+9d

Montana State AG+9d

Montana State AG+22d

Maine State AG+22d

Massachusetts State AG+22d

Oregon State AG+22d

Indiana State AG+23d

New Hampshire State AG+30d

Pattern: first filing Feb 7 (MT), last Mar 8 (NH) — a 30-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 15 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/OCP/Consumer-notification-letter-1082.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 7, 2024
Raw hash: 3cf7fd877be2a86c977575a01536113669f1b76d8dc737b89a667b926b7931ae

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityThe Northwestern Mutual Life Insurance Company

Victim entityVanguard

IncidentThird-Party / Supply Chain

Stated responseEngaged cybersecurity firms to assist with forensic investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov