HackingFinancial ServicesTechnologyFinanceStolen CredentialsCapture Stored DataData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)Financial accountCriticalContained

DRIVEWEALTH, LLC

bd_4073e70b3c046091 · schema v1 · pii pii-v2

Severity

Critical

Discovered

Sep 28, 2026

Filed

Sep 29, 2026

To disclose

≤1 day

Affected

143,173state residents only

Linked

7 filings

Confidence

69%

Full breach record for DRIVEWEALTH, LLC →

DriveWealth LLC notified the Iowa Attorney General of a security incident occurring between September 4 and 5, 2026. Unauthorized access resulted in the exfiltration of Iowa residents' full names, Social Security numbers, and partial account numbers. DriveWealth contained the compromise on September 5, 2026, and began notifying approximately 143,173 affected residents on September 29, 2026, offering complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Iowa clock✓ IA AG ≤5 bday≤1 day discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 24 days

discovery → filing · ≤1 day / 1 days

Sep 4, 2026

Begins

Sep 28, 2026

Discovered

Sep 29, 2026

Filed

vs. sector median

8 wks faster

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

South Carolina State AGbd_389a513f4e27d1032026-09-29Verified
Delaware State AGbd_e1476c56dcc944132026-09-29Verified
California State AGbd_b38a2f757806b77b2026-09-30 · +1dCandidate
Massachusetts State AGbd_cdc9f273200ddbc82026-10-01 · +2dVerified

Show 2 more filings ↓up to 14d gap

Texas State AGbd_28bb5fc180c0b90a2026-10-02 · +3dVerified
Washington State AGbd_05223f0c5d38f06d2026-10-13 · +14dVerified

Name: MCDONALD HOPKINS LLC
norm: mcdonald hopkins

Name: DRIVEWEALTH, LLC
norm: drivewealth
Industry: Financial ServicesllmTechnologyllm

Discovered: Sep 28, 2026
Breach occurred: Sep 4, 2026 – Sep 5, 2026
Undetected for: 24 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 29, 2026
Affected individuals: 143,173state-resident count only
Data types: Government IDIdentity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing ApplicationT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Submitted notification to the Office of the Attorney General of Iowa, Consumer Protection Division
Initial access: exploit_public_facing

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Provided affected residents with email notification
Offered the affected residents complimentary memberships with a credit monitoring service
Changes made: Continually evaluates and modifies its practices and internal controls to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Time to disclose: ≤1 day(1 days from discovery to filing)
Compliance flags: IA AG ≤5 bday
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

South Carolina State AGSep 29 · first

Delaware State AGSep 29 · first

Iowa State AGSep 29 · first · this page

California State AG+1d

Massachusetts State AG+2d

Texas State AG+3d

Washington State AG+14d

Pattern: first filing Sep 29 (SC), last Oct 13 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.iowaattorneygeneral.gov/media/cms/9292026_DriveWealth_LLC_98934830247D0.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 29, 2026
Raw hash: 9b6fbb36126e6ef5a744c1539404dd5f3e7882339f60ce9c39c927d78cbe602e

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMCDONALD HOPKINS LLC

Victim entityDRIVEWEALTH, LLC

Incidentdiscovered Sep 28, 2026

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

ComplianceIA AG ≤5 bday

Extraction provenanceno artifact recorded

Source provenancewww.iowaattorneygeneral.gov