Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumActive

Atria Wealth Solutions, Inc.

bd_43fb324aeece2065 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Mar 26, 2020

Filed

May 7, 2020

To disclose

6 weeks

Affected

574state residents only

Linked

6 filings

Confidence

71%

Full breach record for Atria Wealth Solutions, Inc. →2 incidents on file

Atria Wealth Solutions notified Washington AG of unauthorized access to an employee email account on Dec 3, 2019, discovered March 26, 2020. Incident involved phishing leading to credential compromise. 574 WA residents affected; data included names, SSNs, and DOBs. Atria engaged forensic specialists and provided 12 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Washington clock⏱ WA AG >30d6 weeks discovery → filing

⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 114 days

discovery → filing · 6 weeks / 42 days

Dec 3, 2019

Begins

Mar 26, 2020

Discovered

May 7, 2020

Filed

vs. sector median

3 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_4754d4123d7410ef2020-05-07Verified
Oregon State AGbd_653a0d7a323a455b2020-05-07Verified
Montana State AGbd_8aba4f336fb47f3a2020-05-07Verified
Indiana State AGbd_ef46e538ccef29bf2020-05-07Verified

Show 1 more filing ↓up to 4d gap

New Hampshire State AGbd_45fed457f80cf4d92020-05-11 · +4dVerified

Name: Mullen Coughlin LLC
norm: mullen coughlin

Name: Atria Wealth Solutions, Inc.
norm: atria wealth
Industry: Financial Servicesllm

Discovered: Mar 26, 2020
Breach occurred: Dec 3, 2019
Undetected for: 114 daysoccurrence → discovery
Materiality determined: —
Notification sent: May 7, 2020
Affected individuals: 574state-resident count only
Data types: Identity (basic)Government ID
Data elements: NameSocial Security numberDate of birth
WA-stated cause: Unauthorized Access
WA-stated duration: lifecycle Unknowndexposure Unknownd
WA-stated discovery: Found after the fact
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified Washington Office of the Attorney General
Initial access: phishing_link

During the incident: Launched an in-depth investigation with assistance from third-party computer forensics specialists
Provided potentially impacted individuals complimentary access to credit monitoring and identity restoration services for twelve (12) months through Experian
Reviewed its existing policies and procedures to mitigate any risk associated with this incident and to better prevent future incidents
Took steps to implement further security enhancements
Changes made: Reviewed existing policies and procedures to mitigate risk and prevent future incidents
Implemented further security enhancements
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: WA AG >30d
Discovery-date grounding: AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

California State AGMay 7 · first

Oregon State AGMay 7 · first

Montana State AGMay 7 · first

Indiana State AGMay 7 · first

Washington State AGMay 7 · first · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://agportal-s3bucket.s3.amazonaws.com/databreach/BreachM10548.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: May 7, 2020
Raw hash: 563e58ba7bbd5cf6fc00d3f470957fd3185392219edfa2c27372657f7605f8ba

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityMullen Coughlin LLC

Victim entityAtria Wealth Solutions, Inc.

Incidentdiscovered Mar 26, 2020

Stated responseLaunched an in-depth investigation with assistance from third-party computer forensics specialists

ComplianceWA AG >30d

Extraction provenanceno artifact recorded

Source provenanceagportal-s3bucket.s3.amazonaws.com