HackingIDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNTMediumContained
Werth Wealth Management, LLC
bd_97b2e69bc8b338af · schema v1 · pii pii-v1
Full breach record for Werth Wealth Management, LLC →Werth Wealth Management, LLC (WWM) notified clients of a cybersecurity event on July 1, 2026, where an unauthorized third party accessed WWM systems containing client personal information. Data potentially exposed includes names, SSNs, driver's license numbers, passport numbers, dates of birth, and Raymond James account numbers. Raymond James and WWM responded by placing ID theft alerts, notifying law enforcement, engaging cybersecurity experts, and offering 2 years of Experian IdentityWorks credit monitoring. No client accounts at Raymond James were directly accessed.
Massachusetts clock✓ MA AG ≤30d≤1 day discovery → filing
⚠ filing dateThe stored discovery date equals the regulator filing date, so no genuine detection date was captured.
Tracked as a single-filing incident — the only disclosure on record for this event so far.ConfirmedView incident
Source provenance
- Source URL
- https://www.mass.gov/doc/2026-1241-werth-wealth-management-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jul 1, 2026
- Raw hash
- 0809811f5650c27dc6fc617629485c31db80666ef73f554fd82a39b6e908bf04
Reporting entity
- Name
- Werth Wealth Management, LLCnorm: werth wealth management
Victim entity
- Name
- Werth Wealth Management, LLCnorm: werth wealth management
Incident
- Discovered
- Jul 1, 2026
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid Accounts
- Threat actor
- External
Compliance
- Time to disclose
- ≤1 day(0 days from discovery to filing)
- Compliance flags
- MA AG ≤30d
- Discovery-date grounding
- filing dateThe stored discovery date equals the regulator filing date, so no genuine detection date was captured.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.