Social EngineeringProfessional ServicesProfessional ServicesPhishingData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

CW Advisors, LLC

bd_6da1bce624130cc3 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 4, 2026

Filed

Mar 26, 2026

To disclose

7 weeks

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for CW Advisors, LLC →2 incidents on file

CW Advisors, LLC reported a phishing incident to the New Hampshire Attorney General on March 26, 2026. The breach occurred on February 4, 2026, when an employee clicked a phishing link, leading to unauthorized access to email accounts. One New Hampshire resident's name, driver's license number, and financial account number were exposed. CW Advisors disabled compromised accounts, reset passwords, and provided one year of complimentary credit monitoring to the affected individual.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 7 weeks / 50 days

Feb 4, 2026

Discovered

Mar 26, 2026

Filed

vs. sector median

12 wks faster

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_08729120ea2d3d262026-03-26Candidate
Massachusetts State AGbd_a5dd2dc877d9481b2026-03-26Verified

Name: CW Advisors, LLC
norm: cw advisors
Domain: cwadvisorsgroup.com

Name: CW Advisors, LLC
norm: cw advisors
Domain: cwadvisorsgroup.com
Industry: Professional Servicesllm

Discovered: Feb 4, 2026
Materiality determined: —
Notification sent: Mar 26, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office
Initial access: phishing_link

During the incident: Disabled the account that sent the messages
Identified additional accounts that had interacted with the phishing message, and disabled those accounts
Reset the password for each identified account
Mailed a notification letter via U.S. First-Class mail to the New Hampshire resident
Offering the resident one-year of complimentary credit monitoring and identity theft protection services
Changes made: Taking steps to enhance their email environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(50 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGMar 26 · first

Massachusetts State AGMar 26 · first

New Hampshire State AGMar 26 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/cw-advisors-20260326.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Mar 26, 2026
Raw hash: 3a7aa48f030c3536e89472dbb981cdff2cdfeadbccebcee0e243838a4c0f63c2

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCW Advisors, LLC

Victim entityCW Advisors, LLC

Incidentdiscovered Feb 4, 2026

Stated responseDisabled the account that sent the messages

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov