MisuseFinancial ServicesFinancePrivilege AbuseCustomer Data InvolvedTargetedIdentity (basic)Government IDMediumActive

Nationwide Retirement Solutions, Inc.

bd_61e0244f897a6e31 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Sep 23, 2022

Filed

Oct 17, 2022

To disclose

24 days

Affected

13state residents only

Linked

3 filings

Confidence

68%

Full breach record for Nationwide Retirement Solutions, Inc. →4 incidents on file

Nationwide Retirement Solutions, Inc. notified the Idaho State Controller of a data breach involving PII of 13 Idaho plan participants. The incident involved unauthorized access to personal information (SSN, DOB, etc.) likely by an insider printing a participant list. Nationwide is cooperating with the FBI and offering 2 years of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 24 days

Sep 23, 2022

Discovered

Oct 17, 2022

Filed

vs. sector median

5 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Massachusetts State AGbd_22f384163169c9662022-10-04 · +13dVerified
Maine State AGbd_b7708958d683772a2022-10-04 · +13dCandidate

Name: Idaho State Controller
norm: idaho state controller

Name: Nationwide Retirement Solutions, Inc.
norm: nationwide retirement
Domain: nationwide.com
Industry: Financial Servicesllm

Discovered: Sep 23, 2022
Materiality determined: —
Notification sent: —
Affected individuals: 13state-resident count only
Data types: Identity (basic)Government ID
Data elements: Social Security numberDate of birth
Attack vector: Insider
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: Internal
Regulator citations: Notified Idaho Attorney General's Office
Initial access: insider_action

During the incident: Conducted an investigation with its own investigators
Assistance from the FBI
Notified regulators, plan sponsors and impacted individuals
Notified law enforcement and are cooperating with their investigation
Offering you two years of free credit monitoring and identity theft protection through Equifax services
Changes made: Conducting monitoring of its own accounts for all the affected plan participants
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 24 days(24 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Massachusetts State AGOct 4 · first

Maine State AGOct 4 · first

Idaho State AG+13d · this page

Pattern: first filing Oct 4 (MA), last Oct 17 (ID) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://ag.idaho.gov/content/uploads/2022/10/10-14-22-Nationwide-Retirement-Solutions-Inc.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 17, 2022
Raw hash: 92211bb93dfdbfa426e6ef67c3b6c5e52280db17885047d4f0398e029ca3dd33

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityIdaho State Controller

Victim entityNationwide Retirement Solutions, Inc.

Incidentdiscovered Sep 23, 2022

Stated responseConducted an investigation with its own investigators

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceag.idaho.gov