Social EngineeringPhishingCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
AMERIPRISE FINANCIAL, INC.
bd_503fcf3310b383e6 · schema v1 · pii pii-v1
Full breach record for AMERIPRISE FINANCIAL, INC. →Ameriprise Financial Services, LLC notified the New Hampshire Attorney General on February 6, 2026, of a phishing incident affecting 2 New Hampshire residents. On January 5, 2026, a financial advisor clicked a malicious link, installing remote access software (ITAgent). The incident potentially exposed client PII, including SSNs, driver's license numbers, and financial account data. Ameriprise offered one year of credit monitoring and enhanced account verification safeguards.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_9d5f81c7608a52cfNew Hampshire State AGfiled 2025-12-22(46d gap)Candidate
- bd_9a4048dade846bddNew Hampshire State AGfiled 2025-10-23(106d gap)Candidate
Source provenance
- Source URL
- https://mm.nh.gov/files/uploads/doj/remote-docs/ameriprise-financial-services-20260206.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 6, 2026
- Raw hash
- 5a5255c029c3f2594b011eeb4d0fbe399e87a3409b917469c95e06233b49f042
Reporting entity
- Name
- AMERIPRISE FINANCIAL, INC.norm: ameriprise financial
- Domain
- ameriprise.com
Victim entity
- Name
- AMERIPRISE FINANCIAL, INC.norm: ameriprise financial
- Domain
- ameriprise.com
Incident
- Discovered
- Jan 5, 2026
- Materiality determined
- —
- Notification sent
- Feb 6, 2026
- Affected individuals
- 2
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 weeks(32 days from discovery to filing)
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.