Social EngineeringPhishingDelayed DiscoveryIDENTITY_BASICLowContained
Maniscalco Wealth Management ltd
bd_98efb9907ecf6c87 · schema v1 · pii pii-v1
Full breach record for Maniscalco Wealth Management ltd →Maniscalco Wealth Management Ltd. notified consumers of a data breach involving unauthorized access to an employee's email account between October 23 and October 30, 2025. The incident likely resulted from phishing. Affected data included names. The company offered 12 months of complimentary identity monitoring services.
Vermont clock✗ VT AG >45 bday19 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 3 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_2e4d2e860f85bb14Maine State AGfiled 2026-03-06Candidate
- bd_dbb5805855f481bfNew Hampshire State AGfiled 2026-05-06(61d gap)Verified
Source provenance
- Source URL
- https://ago.vermont.gov/document/2026-03-06-maniscalco-wealth-management-data-breach-notice-consumers
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Mar 6, 2026
- Raw hash
- c6acae86e9992e8dae99433f01c9e4fca8d31dc846f76bb20b85f9026d3f9219
Reporting entity
- Name
- Maniscalco Wealth Management ltdnorm: maniscalco wealth management
- Domain
- mwmbh.com
Victim entity
- Name
- Maniscalco Wealth Management ltdnorm: maniscalco wealth management
- Domain
- mwmbh.com
Incident
- Discovered
- Oct 23, 2025
- Materiality determined
- Mar 6, 2026
- Notification sent
- Mar 6, 2026
- Affected individuals
- Not disclosed
- Data types
- IDENTITY_BASIC
- Attack vector
- Phishing
- MITRE ATT&CK
- T1566.002 Spearphishing Link
- Threat actor
- External
- Initial access
- phishing_link
Compliance
- Time to disclose
- 19 weeks(134 days from discovery to filing)
- Compliance flags
- VT AG >45 bday
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.