HackingFinancial ServicesFinanceStolen CredentialsEmail MisuseMulti-Stage ChainCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountHighActive

NewEdge Advisors, LLC

bd_6b48d10d5c6b01d3 · schema v1 · pii pii-v1

Severity

High

Discovered

Feb 15, 2024

Filed

Sep 12, 2024

To disclose

30 weeks

Affected · nationwide

1,1168 in this filing

Linked

4 filings

Confidence

65%

Full breach record for NewEdge Advisors, LLC →

NewEdge Advisors, LLC reported an unauthorized access to email accounts between Oct 21, 2023 and Mar 6, 2024. Discovered Feb 15, 2024. Affected 1,116 individuals, including 8 Maine residents. Data included names, SSNs, driver's licenses, and financial account numbers. Notices sent Sep 12, 2024. Credit monitoring offered.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Feb 15, 2024 → Filed with AG Sep 12, 2024210d ✗ ME AG >90d30 weeks discovery → filing

⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.

Incident timeline

undetected · 117 days

discovery → filing · 30 weeks / 210 days

Oct 21, 2023

Begins

Feb 15, 2024

Discovered

Sep 12, 2024

Filed

vs. sector median

+21 wks slower

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

New Hampshire State AGbd_56a04ead23afbb4f2024-09-12Verified
Indiana State AGbd_62e240496e6931d52024-09-12Candidate
Massachusetts State AGbd_6bb79e3c4f02542f2024-09-12Verified

Name: NewEdge Advisors, LLC
norm: newedge advisors
Domain: newedgecg.com
Industry: Financial Services

Name: NewEdge Advisors, LLC
norm: newedge advisors
Domain: newedgecg.com
Industry: Financial Services
Industry: Financial Servicesllm

Discovered: Feb 15, 2024
Breach occurred: Oct 21, 2023 – Mar 6, 2024
Undetected for: 117 daysoccurrence → discovery
Materiality determined: —
Notification sent: Sep 12, 2024
Affected individuals: 1,116state + nationwide
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Providing written notice of this event to relevant state regulators
Initial access: valid_credentials

During the incident: Secured its email tenant
Began an investigation to determine the nature and scope of the activity
Initiated a review of the data stored within relevant accounts
Providing access to credit monitoring services for twelve (12) months through Experian
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this event to relevant state regulators
Providing written notice to the three major consumer reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Assess and further strengthen the security of our systems and computer environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 30 weeks(210 days from discovery to filing)
Compliance flags: ME AG >90d · 210dME resident >60d · 210d
Discovery-date grounding: unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Feb 15, 2024
→ Filed with AG: Sep 12, 2024
210d 90 days ME AG >90d
Maine
Discovered: Feb 15, 2024
→ Notified: Sep 12, 2024
210d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Feb 15, 2024 → Filed with AG: Sep 12, 2024	210d	90 days	ME AG >90d
Maine	Discovered: Feb 15, 2024 → Notified: Sep 12, 2024	210d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

New Hampshire State AGSep 12 · first

Indiana State AGSep 12 · first

Massachusetts State AGSep 12 · first

Maine State AGSep 12 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/5b35d310-7d2d-4113-8de8-4c56aecb41ea.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 12, 2024
Raw hash: d15b7e3145ecbbdbdb66d8281078f7c38e8ac8dd5fc6b7bacf18cba6b1e3309b

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityNewEdge Advisors, LLC

Victim entityNewEdge Advisors, LLC

Incidentdiscovered Feb 15, 2024

Stated responseSecured its email tenant

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov