HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Newport Advisory Partners

bd_4f22cd2f3c52b638 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 12, 2025

Filed

Apr 25, 2025

To disclose

15 weeks

Affected

Not disclosed

Linked

6 filings

Confidence

64%

Full breach record for Newport Advisory Partners →

Newport Advisory, LLC experienced unauthorized access to its computer network. The breach occurred between December 24, 2024, and January 12, 2025, and was discovered on January 12, 2025. Files containing personal information, including names, were exfiltrated. The company took the network offline, notified law enforcement, and engaged cybersecurity experts. Affected individuals are offered two years of credit monitoring.

J jump to incidentP pin to compareR raw source

California clockDiscovered Jan 12, 2025 → Notified Apr 24, 2025102d ✗ CA 60-day late15 weeks discovery → filing

Incident timeline

undetected · 19 days

discovery → filing · 15 weeks / 103 days

Dec 24, 2024

Begins

Jan 12, 2025

Discovered

Apr 25, 2025

Filed

vs. sector median

+6 wks slower

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Maine State AGbd_69448329b3586e052025-04-25Verified
Montana State AGbd_d60ba67fa8a205252025-04-25Verified
Nebraska State AGbd_1784590b435af6a32025-04-24 · +1dCandidate
Indiana State AGbd_9f9d300762068a8d2025-04-24 · +1dVerified

Show 1 more filing ↓up to 3d gap

New Hampshire State AGbd_13bf99e5ca8ff7062025-04-28 · +3dVerified

Name: Newport Advisory Partners
norm: newport advisory
Domain: newportap.com

Name: Newport Advisory Partners
norm: newport advisory
Domain: newportap.com
Industry: Financial Servicesllm

Discovered: Jan 12, 2025
Breach occurred: Dec 24, 2024 – Jan 12, 2025
Undetected for: 19 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: Not disclosed
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified federal law enforcement

During the incident: Took the entire Newport Advisory network offline
Notified law enforcement
Engaged external cybersecurity experts to investigate
Implemented additional security monitoring tools and configuration changes within the Newport environment
Changes made: Offering a 2-year complimentary credit monitoring service through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(103 days from discovery to filing)
Compliance flags: CA 60-day late · 102d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.
Clock breakdown: Statute Window Elapsed Threshold Status
California
Discovered: Jan 12, 2025
→ Notified: Apr 24, 2025
102d 60 days (analyst band, pre-2026 discoveries) CA 60-day late

Statute	Window	Elapsed	Threshold	Status
California	Discovered: Jan 12, 2025 → Notified: Apr 24, 2025	102d	60 days (analyst band, pre-2026 discoveries)	CA 60-day late

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGApr 24 · first

Indiana State AGApr 24 · first

Maine State AG+1d

Montana State AG+1d

California State AG+1d · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-601878
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: 50f50fed156ea1bdb019c23eb35d0f3e952647118bb70588540e18e6e569c79d

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNewport Advisory Partners

Victim entityNewport Advisory Partners

Incidentdiscovered Jan 12, 2025

Stated responseTook the entire Newport Advisory network offline

ComplianceCA 60-day late

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov