HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedFinancial accountIdentity (basic)Government IDHighContained

ASSETMARK, INC.

bd_6ed05ad3f644267a · schema v1 · pii pii-v1

Severity

High

Discovered

May 15, 2026

Filed

Jun 12, 2026

To disclose

28 days

Affected

15,085state residents only

Linked

11 filings

Confidence

66%

Full breach record for ASSETMARK, INC. →2 incidents on file

AssetMark, Inc., a wealth management platform, reported that on May 15, 2026, an unauthorized user obtained access to and downloaded files containing customer information using compromised employee login credentials. The incident was isolated to AssetMark. Affected data may include names, addresses, Social Security numbers, and financial account information. AssetMark terminated access, reset credentials, engaged forensic investigators, and is offering 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Massachusetts clock✓ MA AG ≤30d28 days discovery → filing

Incident timeline

discovery → filing · 28 days

May 15, 2026

Begins

May 15, 2026

Discovered

Jun 12, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Washington State AGbd_33f04a386aea24d32026-06-11 · +1dVerified
Oregon State AGbd_6886b6cefdfdb7fd2026-06-11 · +1dVerified
Delaware State AGbd_6af2c69a79abc5b22026-06-11 · +1dVerified
Nebraska State AGbd_7ac3f8543828d6ee2026-06-11 · +1dVerified

Show 6 more filings ↓up to 26d gap

New Hampshire State AGbd_c7f8a628cbde3f8a2026-06-11 · +1dVerified
Vermont State AGbd_d0136116688cfee02026-06-11 · +1dVerified
Rhode Island State AGbd_e099e3ab62a709032026-06-15 · +3dVerified
Texas State AGbd_30436bcce43994592026-06-18 · +6dVerified
California State AGbd_b328f99afc4a52512026-06-26 · +14dVerified
Rhode Island State AGbd_cb19c05bc1b11d032026-07-08 · +26dVerified

Name: ASSETMARK, INC.
norm: assetmark

Name: ASSETMARK, INC.
norm: assetmark
Industry: Financial Servicesllm

Discovered: May 15, 2026
Breach occurred: May 15, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 15,085state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately terminating the unauthorized access
Re-setting employee credentials
Engaging internal and external information security professionals to conduct a forensic investigation
Increasing systems monitoring
Implementing additional security safeguards
Changes made: Offering access to twenty-four (24) months of complimentary credit monitoring and identity restoration services through Epiq Privacy Solutions ID
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 28 days(28 days from discovery to filing)
Compliance flags: MA AG ≤30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Washington State AGJun 11 · first

Oregon State AGJun 11 · first

Delaware State AGJun 11 · first

Nebraska State AGJun 11 · first

New Hampshire State AGJun 11 · first

Vermont State AGJun 11 · first

Massachusetts State AG+1d · this page

Rhode Island State AG+4d

Texas State AG+7d

California State AG+15d

Rhode Island State AG+27d

Pattern: first filing Jun 11 (WA), last Jul 8 (RI) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-962-assetmark-inc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2026
Raw hash: f5dbbfa60c63340b43edc785a9ade11f28bf5709e5abdb22e6ef1b8a6888c71d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityASSETMARK, INC.

Victim entityASSETMARK, INC.

Incidentdiscovered May 15, 2026

Stated responseImmediately terminating the unauthorized access

ComplianceMA AG ≤30d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov