Third-Party / Supply ChainFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedPIIIdentity (basic)LowContained

Ultimus Funds Solutions

bd_3bab09d7fb1fc047 · schema v1 · pii pii-v2

Severity

Low

Discovered

—

Filed

Aug 1, 2026

To disclose

—

Affected

Not disclosed

Confidence

67%

Full breach record for Ultimus Funds Solutions →

Sweetwater Development & Management Company notified Massachusetts residents of a data security event at its third-party vendor, Ultimus Funds Solutions. The incident, communicated initially on July 30, 2026, involved certain information provided to Sweetwater. Sweetwater engaged third-party cybersecurity specialists, confirmed the scope with Ultimus, and enhanced its cybersecurity infrastructure. Affected individuals are offered 24 months of credit monitoring via TransUnion.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Aug 1, 2026

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: Sweetwater Development & Management Company
norm: sweetwater development management
Domain: sweetwatercompanies.com

Name: Ultimus Funds Solutions
norm: ultimus funds
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: Aug 14, 2026
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Third-Party / Supply Chain
Regulator citations: Provided written notification to the requisite regulatory authorities
Third party: via Ultimus Funds Solutions

During the incident: Engaged third-party cybersecurity specialists to confirm the incident details
Worked with Ultimus to confirm relevant scope
Communicated with relevant individuals
Assessed potential notification obligations under applicable legal frameworks
Coordinated additional resources to supplement prior communication
Provided written notification to affected individuals and the requisite regulatory authorities
Evaluating relationship with Ultimus
Taken steps to further enhance existing cybersecurity infrastructure
Offering 24 months of credit monitoring and identity protection services through TransUnion
Changes made: Evaluating relationship with Ultimus
Taken steps to further enhance existing cybersecurity infrastructure
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1359-sweetwater-development-management-company/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 1, 2026
Raw hash: 16625bd24dacdc3f53264858eb627b2d86d51e05327e88ca6b6e84686c2dd8b3

Reporting entitySweetwater Development & Management Company

Victim entityUltimus Funds Solutions

IncidentThird-Party / Supply Chain

Stated responseEngaged third-party cybersecurity specialists to confirm the incident details

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov