DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingCustomer Data InvolvedData ExfiltratedIdentity (basic)Government IDMediumContained

Mezrah Financial

bd_4bb3ef66b5439f2c · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 19, 2025

Filed

Dec 22, 2025

To disclose

44 weeks

Affected

2state residents only

Linked

4 filings

Confidence

67%
Full breach record for Mezrah Financial2 incidents on file

Mezrah Financial, a Florida-based financial advisory firm, notified the New Hampshire Attorney General of a data security incident affecting 2 New Hampshire residents. On or about February 19, 2025, Mezrah became aware of suspicious activity in its email environment, leading to the unauthorized acquisition of an employee's email contents. The affected data included names, addresses, dates of birth, and Social Security numbers. Mezrah engaged independent forensic reviewers, offered 12 months of credit monitoring and identity protection via IDX/Zerofox, and implemented additional technical security measures. No evidence of misuse was found.

Incident timeline

discovery → filing · 44 weeks / 306 days

Feb 19, 2025

Discovered

Dec 22, 2025

Filed

vs. sector median

+35 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Filing propagation · 4 filings · 4 states

View merged incident ↗
Indiana State AGDec 18 · first
New Hampshire State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.