HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDMediumContained

Connecticut Wealth Management, LLC

bd_58ee660558fccf81 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 21, 2026

Filed

Jul 13, 2026

To disclose

12 weeks

Affected

1state residents only

Linked

3 filings

Confidence

64%

Full breach record for Connecticut Wealth Management, LLC →

Connecticut Wealth Management, LLC notified the NH Attorney General of unauthorized access to its email systems. The company was alerted to the incident on April 21, 2026, and determined on June 15, 2026, that personal information (name and SSN) of one New Hampshire resident may have been accessed between April 20-21, 2026. The company secured its network, engaged external cybersecurity professionals, and offered 24 months of credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 12 weeks / 83 days

Apr 20, 2026

Begins

Apr 21, 2026

Discovered

Jul 13, 2026

Filed

vs. sector median

+3 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Vermont State AGbd_9fac48bdd7c9738c2026-07-08 · +5dVerified
Massachusetts State AGbd_a4206bb7280c34492026-07-07 · +6dCandidate

Name: Connecticut Wealth Management, LLC
norm: connecticut wealth management

Name: Connecticut Wealth Management, LLC
norm: connecticut wealth management
Industry: Financial Servicesllm

Discovered: Apr 21, 2026
Breach occurred: Apr 20, 2026 – Apr 21, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: Jul 7, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified New Hampshire Attorney General

During the incident: Secured our network
Commenced an investigation with external cybersecurity professionals
Conducted forensic investigation and manual document review
Notified the impacted resident
Provided contact information for the FTC and major credit reporting agencies
Changes made: Placed heightened security status on investment accounts
Continues to monitor all activities
Providing complimentary 24-month credit monitoring services from LifeLock
Continually evaluates and modifies practices to enhance security and privacy
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(83 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGJul 7 · first

Vermont State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Jul 7 (MA), last Jul 13 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/connecticut-wealth-management-20260713.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 13, 2026
Raw hash: b3a41d7f96fb1af34eb053928b8c0a8d0555ef66abf8417252349027ad26acca

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityConnecticut Wealth Management, LLC

Victim entityConnecticut Wealth Management, LLC

Incidentdiscovered Apr 21, 2026

Stated responseSecured our network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov