HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHealth (basic)CredentialsPIIMediumContained

Mercer Advisors Inc.

bd_41c52380b4cba0f8 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Mar 31, 2026

To disclose

—

Affected

Not disclosed

Linked

10 filings

Confidence

80%

Full breach record for Mercer Advisors Inc. →2 incidents on file

Mercer Advisors Inc., a wealth management firm, experienced a cybersecurity incident on or around January 22–25, 2026, involving unauthorized access to systems storing client data. An unauthorized third party obtained personal information including names, contact details, government-issued IDs, dates of birth, account numbers, SSNs (for some), health information, tax information, and credentials. The incident was contained and notification letters were sent March 31, 2026.

J jump to incidentP pin to compareR raw source

Incident timeline

Jan 22, 2026

Begins

Mar 31, 2026

Filed

This filing is one of 10 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_74d6e3e7644e603d2026-02-21 · +38dVerified

Regulatory filings (8) · sorted by filing gap

Massachusetts State AGbd_0a5f73a7f4b8af802026-03-31Verified by operator
Nebraska State AGbd_17b4a213c92589c22026-03-31Verified
Vermont State AGbd_7a9028119074fbf32026-03-31Verified by operator
Washington State AGbd_c9cf67fb541b27502026-03-31Verified

Show 4 more filings ↓up to 17d gap

Indiana State AGbd_cf90fb475588f3162026-03-31Verified
Montana State AGbd_f0e3ca9ef62041f12026-03-31Verified
Texas State AGbd_7434b0177f07c09a2026-04-02 · +2dVerified
Oregon State AGbd_4c2c111384c827792026-04-17 · +17dVerified

Name: Mercer Advisors Inc.
norm: mercer advisors
Domain: merceradvisors.com

Name: Mercer Advisors Inc.
norm: mercer advisors
Domain: merceradvisors.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jan 22, 2026 – Jan 25, 2026
Materiality determined: —
Notification sent: Mar 31, 2026
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)CredentialsPII
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1530 Data from Cloud Storage Object
Threat actor: External

During the incident: Promptly launched an investigation with the assistance of leading external cybersecurity experts to understand its nature and scope
Blocked the unauthorized party's access to our systems
Took additional steps to enhance our safeguards
Reported the issue to law enforcement authorities
Offering a two-year IdentityWorks Credit Plus membership from Experian, a credit monitoring, dark web monitoring, and identity protection service, at no cost to affected individuals
Changes made: Took additional steps to enhance our safeguards
Blocked the unauthorized party's access to our systems
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 9 filings · 9 states

View merged incident ↗

Massachusetts State AGMar 31 · first

Nebraska State AGMar 31 · first

Vermont State AGMar 31 · first

Washington State AGMar 31 · first

Indiana State AGMar 31 · first

Montana State AGMar 31 · first

California State AGMar 31 · first · this page

Texas State AG+2d

Oregon State AG+17d

Pattern: first filing Mar 31 (MA), last Apr 17 (OR) — a 17-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-621099
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 31, 2026
Raw hash: ea9b776048ffbd405698222cd1d6699daab0a62bb0c7945a3059148e02f7f8c8

Linked disclosures

Ransomware claims (1)

Regulatory filings (8) · sorted by filing gap

Reporting entityMercer Advisors Inc.

Victim entityMercer Advisors Inc.

IncidentUnauthorized Access

Stated responsePromptly launched an investigation with the assistance of leading external cybersecurity experts to understand its nature and scope

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov