HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)LowContained

CETERA FINANCIAL GROUP, INC.

bd_39bfe02aa0ef152a · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Sep 2, 2026

To disclose

—

Affected

112state residents only

Confidence

69%

Full breach record for CETERA FINANCIAL GROUP, INC. →7 incidents on file

Cetera Financial Group issued a supplemental notice to the New Hampshire Attorney General regarding an email account compromise. An unauthorized person accessed a single employee email account between July 7, 2025, and August 21, 2025. The incident affected 112 New Hampshire residents (110 notified previously, 2 in this supplemental notice). Data involved included names and other personal information. Cetera secured the account, investigated the activity, and is offering credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

Jul 7, 2025

Begins

Sep 2, 2026

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed112 affectedView incident

Name: Cetera Financial Group
norm: cetera financial

Name: CETERA FINANCIAL GROUP, INC.
norm: cetera financial
Domain: cetera.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jul 7, 2025 – Aug 21, 2025
Materiality determined: —
Notification sent: Sep 2, 2026
Affected individuals: 112state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General
Initial access: valid_credentials

During the incident: Took steps to assess and secure the email account
Investigated the activity
Worked with a notice vendor to validate the information
Providing written notice to potentially impacted individuals
Offering complimentary access to credit and identity monitoring services through IDX
Changes made: Reviewing and enhancing existing policies and procedures
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cetera-financial-group-20260902.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 2, 2026
Raw hash: 6963d2f8763160cc6a7780519683300507cbe76f763dd4a518359efc91142144

Reporting entityCetera Financial Group

Victim entityCETERA FINANCIAL GROUP, INC.

IncidentUnauthorized Access

Stated responseTook steps to assess and secure the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov