HackingFinancial ServicesFinanceCustomer Data InvolvedData ExfiltratedPIIIdentity (basic)Government IDMedium

Fox & Company Wealth Management

bd_889eb29fba79b9f1 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 13, 2023

Filed

Nov 10, 2023

To disclose

17 weeks

Affected · nationwide

1681 in this filing

Linked

2 filings

Confidence

63%

Full breach record for Fox & Company Wealth Management →

Fox & Company Wealth Management, a financial services firm, reported an external system breach that occurred and was discovered on July 13, 2023. The incident compromised the names and Social Security numbers of 168 individuals. The company began notifying affected individuals on November 30, 2023, and offered 12 months of identity theft protection services through Experian.

J jump to incidentP pin to compareR raw source

Maine clockDiscovered Jul 13, 2023 → Filed with AG Nov 10, 2023120d ✗ ME AG >90d17 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 17 weeks / 120 days

Jul 13, 2023

Begins

Jul 13, 2023

Discovered

Nov 10, 2023

Filed

vs. sector median

+8 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

New Hampshire State AGbd_6bfb581c838a70742023-11-22 · +12dVerified

Name: Fox & Company Wealth Management
norm: fox company wealth management

Name: Fox & Company Wealth Management
norm: fox company wealth management
Industry: Financial Servicesllm

Discovered: Jul 13, 2023
Breach occurred: Jul 13, 2023
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Nov 30, 2023
Affected individuals: 168state + nationwide
Data types: PIIIdentity (basic)Government ID
Data elements: Social Security number
Attack vector: Unauthorized Access
Threat actor: External

During the incident: Offered 12 months of identity theft protection services through Experian
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 17 weeks(120 days from discovery to filing)
Compliance flags: ME AG >90d · 120dME resident >60d · 140d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Clock breakdown: Statute Window Elapsed Threshold Status
Maine
Discovered: Jul 13, 2023
→ Filed with AG: Nov 10, 2023
120d 90 days ME AG >90d
Maine
Discovered: Jul 13, 2023
→ Notified: Nov 30, 2023
140d 60 days (analyst band; statutory cap is 30 days) ME resident >60d

Statute	Window	Elapsed	Threshold	Status
Maine	Discovered: Jul 13, 2023 → Filed with AG: Nov 10, 2023	120d	90 days	ME AG >90d
Maine	Discovered: Jul 13, 2023 → Notified: Nov 30, 2023	140d	60 days (analyst band; statutory cap is 30 days)	ME resident >60d

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Maine State AGNov 10 · first · this page

New Hampshire State AG+12d

Pattern: first filing Nov 10 (ME), last Nov 22 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/2a1360ed-4ad6-4191-9bd1-05faea9a3984.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 10, 2023
Raw hash: b59dadaeee415791ec323b68e77cb9af8ede10bcb450347fc504587c47258f9b

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityFox & Company Wealth Management

Victim entityFox & Company Wealth Management

Incidentdiscovered Jul 13, 2023

Stated responseOffered 12 months of identity theft protection services through Experian

ComplianceME AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.maine.gov