Social EngineeringPhishingStolen CredentialsCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained

McKAY

bd_9e4d37701b496abf · schema v1 · pii pii-v1

McKay Wealth Management notified the NH AG of an email account compromise affecting one NH resident. Unauthorized access occurred between June 28 and September 19, 2024. Compromised data included names and SSNs. McKay secured the account, notified law enforcement, and offered 24 months of credit monitoring.

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

bd_1234ce5e7de272d9Montana State AGfiled 2025-06-12Candidate
bd_b890167b322cbf32Oregon State AGfiled 2025-06-12Verified by operator
bd_be4ec609474d24efIndiana State AGfiled 2025-06-12Verified
bd_ddb607a9e99e0490California State AGfiled 2025-06-12Verified

Show 1 more filing ↓

bd_ddbea17b3be79a35Washington State AGfiled 2025-06-12Verified

Source provenance

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mckay-wealth-management-20250612.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 12, 2025
Raw hash: da0eca7dce526f6283b251ef068958e3be6111fa074940618f494758832671af

Reporting entity

Name: McKAY
norm: mckay
Domain: mckaybooks.com

Victim entity

Name: McKAY
norm: mckay
Domain: mckaybooks.com

Incident

Discovered: Sep 19, 2024
Materiality determined: Apr 6, 2025
Notification sent: May 7, 2025
Affected individuals: 1
Data types: IDENTITY_BASICIDENTITY_GOVERNMENT
Attack vector: Phishing
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: ExternalFinancial
Initial access: phishing_link

Compliance

Time to disclose: 38 weeks(266 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Extraction provenance

Status: No extraction artifact recorded for this disclosure.