Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedMulti-Stage ChainIdentity (basic)PIILowContained

NewEdge Advisors, LLC

bd_56a04ead23afbb4f · schema v1 · pii pii-v1

Severity

Low

Discovered

Feb 15, 2024

Filed

Sep 12, 2024

To disclose

30 weeks

Affected

11state residents only

Linked

4 filings

Confidence

65%

Full breach record for NewEdge Advisors, LLC →

NewEdge Advisors, LLC reported unauthorized access to email accounts of an independent advisor between Oct 21, 2023, and Mar 6, 2024, following suspicious activity identified on Feb 15, 2024. The incident involved phishing leading to credential compromise. Personal information of 11 New Hampshire residents was potentially affected. NewEdge secured the email tenant, offered credit monitoring via Experian, and notified state regulators.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 117 days

discovery → filing · 30 weeks / 210 days

Oct 21, 2023

Begins

Feb 15, 2024

Discovered

Aug 16, 2024

Scope determined

Sep 12, 2024

Filed

vs. sector median

+21 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_62e240496e6931d52024-09-12Candidate
Maine State AGbd_6b48d10d5c6b01d32024-09-12Verified
Massachusetts State AGbd_6bb79e3c4f02542f2024-09-12Verified

Name: NewEdge Advisors, LLC
norm: newedge advisors

Name: NewEdge Advisors, LLC
norm: newedge advisors
Industry: Financial Servicesllm

Discovered: Feb 15, 2024
Breach occurred: Oct 21, 2023 – Mar 6, 2024
Undetected for: 117 daysoccurrence → discovery
Materiality determined: Aug 16, 2024
Notification sent: Sep 12, 2024
Affected individuals: 11state-resident count only
Data types: Identity (basic)PII
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Provided written notice of this event to relevant state regulators
Initial access: phishing_link

During the incident: Moved quickly to investigate and respond to the event
Assessed the security of NewEdge systems
Identified potentially affected individuals
Secured its email tenant
Provided access to credit monitoring services for through Experian
Provided impacted individuals with guidance on how to better protect against identity theft and fraud
Provided individuals with information on how to place a fraud alert and security freeze on one’s credit file
Provided written notice of this event to relevant state regulators
Changes made: Implementing additional safeguards and training to its employees
Assess and further strengthen the security of our systems and computer environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Indiana State AGSep 12 · first

Maine State AGSep 12 · first

Massachusetts State AGSep 12 · first

New Hampshire State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/newedge-advisors-20240912.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2024
Raw hash: ba79077c7cd999423fa2d1a1325541eb61f6e3bbe5b0df148984fbdbf73d75c5

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityNewEdge Advisors, LLC

Victim entityNewEdge Advisors, LLC

Incidentdiscovered Feb 15, 2024

Stated responseMoved quickly to investigate and respond to the event

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov