MisuseIdentity (basic)Government IDFinancial accountFinancial credentialsMediumContained

J.W. COLE FINANCIAL, INC.

bd_3dafc63693ba53cc · schema v1 · pii pii-v2

Severity

Medium

Discovered

Dec 2, 2024

Filed

Mar 24, 2025

To disclose

—

Affected

Not disclosed

Confidence

66%

Full breach record for J.W. COLE FINANCIAL, INC. →8 incidents on file

J.W. Cole Financial, Inc. notified Nebraska residents of a cybersecurity incident involving an employee, Elizabeth Belisle, who accessed a company email account with suspicious activity. The breach potentially exposed names, SSNs, driver's license numbers, and financial/payment card data. The company secured the account, engaged third-party specialists, and offered 12 months of complimentary credit monitoring and fraud assistance.

J jump to incidentP pin to compareR raw source

Incident timeline

Dec 2, 2024

Discovered

Mar 24, 2025

Filed

Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident

Name: J.W. COLE FINANCIAL, INC.
norm: jw cole financial

Name: J.W. COLE FINANCIAL, INC.
norm: jw cole financial

Discovered: Dec 2, 2024
Materiality determined: —
Notification sent: Mar 24, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountFinancial credentials
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Initial access: insider_action

During the incident: Secured the email account
Engaged a team of third-party specialists to assist with determining the full nature and scope of the event
Undertook a thorough investigation
Confirmed necessary technical safeguards are in place
Providing you with access to Single Bureau Credit Monitoring/Single Bureau Credit Report/Single Bureau Credit Score services at no charge
Providing you with proactive fraud assistance
Changes made: Confirmed necessary technical safeguards are in place
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/923bb524-8558-4a04-98e2-3ff510a33bf3.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 24, 2025
Raw hash: ab184c864c54f99b3d86abeceaef188404ef0f3989f7b3669aec96355eca35e6

Reporting entityJ.W. COLE FINANCIAL, INC.

Victim entityJ.W. COLE FINANCIAL, INC.

Incidentdiscovered Dec 2, 2024

Stated responseSecured the email account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov