Topstep Brokerage
bd_73c0da0a1e966032 · schema v1 · pii pii-v1
Full breach record for Topstep Brokerage →Topstep LLC notified Massachusetts residents of a cybersecurity incident involving high-volume traffic attacks blocked at the Web Application Firewall. The company forced password resets for affected accounts and is implementing mandatory multifactor authentication. Complimentary 24-month identity monitoring via Experian is being offered. No specific dates for discovery or occurrence were provided in the sample letter.
J jump to incidentP pin to compareR raw source
Incident timeline — partial
? — ?
Breach window unknown
Jan 12, 2026
Filed
No interval is drawn: no breach start or discovery date is on record for this filing.
Linked disclosures
Why this link?Regulatory filings (9) · sorted by filing gap
- Vermont State AGbd_feda97c361d069982026-01-16 · +4dVerified
- New Hampshire State AGbd_1ba3a5d6f8186b382026-01-05 · +7dVerified
- Indiana State AGbd_d103e7440b81fd372026-01-20 · +8dVerified
- Indiana State AGbd_e1bd3f7d6444d49f2026-01-20 · +8dVerified
Show 5 more filings ↓Show fewer ↑up to 23d gap
- Indiana State AGbd_865cfabcd1482f642025-12-30 · +13dVerified
- Indiana State AGbd_0a892e5fb23ecfef2025-12-22 · +21dVerified
- New Hampshire State AGbd_204febfe40a8a4232025-12-22 · +21dVerified
- Maine State AGbd_ac7762ff013459da2025-12-22 · +21dCandidate
- Indiana State AGbd_f926e2f8532bba862025-12-20 · +23dVerified
Filing propagation · 10 filings · 5 states
View merged incident ↗Pattern: first filing Dec 20 (IN), last Jan 20 (IN) — a 31-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.