Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

KerberRose

bd_38b9df400b66b751 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 1, 2026

Filed

May 29, 2026

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

66%

Full breach record for KerberRose →

KerberRose Wealth Management, LLC notified Nebraska residents of a data breach occurring on April 29, 2026, discovered on May 1, 2026. An unauthorized third party gained access to an employee's email account via phishing, accessing a backup platform. Personal information potentially exposed includes names, addresses, SSNs, financial account numbers, bank account info, and DOBs. KerberRose isolated the system, engaged forensic investigators, and offers 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 2 days

Apr 29, 2026

Begins

May 1, 2026

Discovered

May 29, 2026

Filed

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Vermont State AGbd_971065d86a0267032026-05-29Verified
Maine State AGbd_b053396543ca5b5e2026-05-29Verified
Indiana State AGbd_b5592268966c1f842026-05-29Verified
Massachusetts State AGbd_df731ff4766cb1442026-05-29Candidate

Show 1 more filing ↓

New Hampshire State AGbd_f7e6792d830978ee2026-05-29Verified

Name: KerberRose
norm: kerberrose
Domain: kerberrose.com

Name: KerberRose
norm: kerberrose
Domain: kerberrose.com
Industry: Financial Servicesllm

Discovered: May 1, 2026
Breach occurred: Apr 29, 2026
Undetected for: 2 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security numberDate of birth
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Isolated the impacted environment
Began an investigation with the help of a leading forensic security firm
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Changes made: Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Vermont State AGMay 29 · first

Maine State AGMay 29 · first

Indiana State AGMay 29 · first

Massachusetts State AGMay 29 · first

New Hampshire State AGMay 29 · first

Nebraska State AGMay 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/2ce9a99e-7ef7-493a-8c8d-34b6d02c84c0.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 29, 2026
Raw hash: b0cfb72d5d7ea4ac419e6fc433f3308bf15479cc7c88850317cbafd991ef720c

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityKerberRose

Victim entityKerberRose

Incidentdiscovered May 1, 2026

Stated responseIsolated the impacted environment

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov