MalwareFinancial ServicesFinanceRansomwareData ExfiltratedData EncryptedCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

Joyal Financial Management Group, LLC

bd_9d96ca02b87e8c5e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Feb 18, 2026

Filed

Jul 29, 2026

To disclose

23 weeks

Affected

49state residents only

Linked

2 filings

Confidence

66%

Full breach record for Joyal Financial Management Group, LLC →

Joyal Financial Management Group, LLC reported a ransomware incident affecting 49 New Hampshire residents. The breach occurred between January 17 and January 27, 2026, when malware encrypted data on a shared server and exfiltrated files. Affected data included names, SSNs, financial account numbers, Tax IDs, driver's license numbers, and health information. Notifications were mailed on July 28, 2026, offering one year of credit monitoring. The FBI was notified.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 32 days

discovery → filing · 23 weeks / 161 days

Jan 17, 2026

Begins

Feb 18, 2026

Discovered

Jul 29, 2026

Filed

vs. sector median

+15 wks slower

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Massachusetts State AGbd_a1d8dec7f5de8e9d2026-07-29Candidate

Name: Joyal Financial Management Group, LLC
norm: joyal financial management

Name: Joyal Financial Management Group, LLC
norm: joyal financial management
Industry: Financial Servicesllm

Discovered: Feb 18, 2026
Breach occurred: Jan 17, 2026 – Jan 27, 2026
Undetected for: 32 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jul 28, 2026
Affected individuals: 49state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Ransomware
MITRE ATT&CK: T1486 Data Encrypted for ImpactT1041 Exfiltration Over C2 Channel
Threat actor: ExternalFinancial
Regulator citations: Notified New Hampshire Attorney General's Office

During the incident: Notified the Federal Bureau of Investigation and will cooperate with any resulting investigation
Offered one year of complimentary credit monitoring
Established a dedicated call center
Implemented measures to further enhance security on the shared server
Changes made: Implemented measures to further enhance security on the shared server
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 23 weeks(161 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Massachusetts State AGJul 29 · first

New Hampshire State AGJul 29 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/joyal-financial-management-group-20260729.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jul 29, 2026
Raw hash: 3181c27f686783a812a0c10849f4bf50d015a73d4a84578243a100265eae004a

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityJoyal Financial Management Group, LLC

Victim entityJoyal Financial Management Group, LLC

Incidentdiscovered Feb 18, 2026

Stated responseNotified the Federal Bureau of Investigation and will cooperate with any resulting investigation

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov