DisclosureLens
Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsCustomer Data InvolvedTargetedIdentity (basic)Government IDFinancial accountHighContained

WELLESLEY ASSET MANAGEMENT, INC.

bd_9d79b3638519b194 · schema v1 · pii pii-v1

Severity

High

Discovered

May 20, 2024

Filed

Sep 27, 2024

To disclose

19 weeks

Affected · nationwide

1,92035 in this filing

Linked

5 filings

Confidence

65%
Full breach record for WELLESLEY ASSET MANAGEMENT, INC. →

Wellesley Asset Management, Inc. reported a cybersecurity incident where an employee's email account was compromised on March 6, 2024, discovered on May 20, 2024. The breach affected 1,920 individuals, including 35 Maine residents. Compromised data included names, SSNs, and financial account numbers. The company engaged forensic experts, notified law enforcement, and offered 24 months of credit monitoring.

Maine clockDiscovered May 20, 2024 → Filed with AG Sep 27, 2024130d ⏱ ME AG >30d19 weeks discovery → filing
⚠ AG web formThe discovery date came from the AG web-form field, which is systematically later than the detection date stated in the letter. Treat the clock as indicative.

Incident timeline

undetected · 75 days
discovery → filing · 19 weeks / 130 days

Mar 6, 2024

Begins

May 20, 2024

Discovered

Sep 27, 2024

Filed

vs. sector median

+10 wks slower

This filing is one of 5 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (4) · sorted by filing gap

Filing propagation · 5 filings · 5 states

View merged incident ↗
Indiana State AGSep 20 · first
Maine State AG+7d · this page

Pattern: first filing Sep 20 (IN), last Oct 3 (MA) — a 13-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.