Social EngineeringPhishingData ExfiltratedCustomer Data InvolvedSupply Chain (3P Vendor)IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Z2 Equity Partners
bd_869858ba52be8361 · schema v1 · pii pii-v1
Full breach record for Z2 Equity Partners →Z2 Capital Partners, LLC notified Massachusetts residents of a data breach involving its outside counsel, Winston & Strawn. On March 25, 2026, a social engineering attack compromised a Winston employee's account, leading to unauthorized access to files containing clients' names, addresses, SSNs/Tax IDs, dates of birth, and bank routing/account numbers. Z2 offered two years of complimentary credit monitoring via Experian IdentityWorks.
Massachusetts clock⏱ MA AG >30d5 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-710-z2-capital-partners-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 1, 2026
- Raw hash
- c3215badb0f6a258af08a85c3013a6df44fcb4c2b3d80ad0d740c059142b998b
Reporting entity
- Name
- Z2 Comicsnorm: z2 comics
- Domain
- z2comics.com
Victim entity
- Name
- Z2 Equity Partnersnorm: z2 equity
- Domain
- z2equity.com
Incident
- Discovered
- Mar 25, 2026
- Materiality determined
- —
- Notification sent
- May 6, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- ExternalFinancial
- Initial access
- phishing_link
Compliance
- Time to disclose
- 5 weeks(37 days from discovery to filing)
- Compliance flags
- MA AG >30d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.