HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedPIIIdentity (basic)LowContained

Hermann Financial Services

bd_a930c1b5b1f086d8 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Oct 15, 2025

To disclose

—

Affected

Not disclosed

Linked

3 filings

Confidence

66%

Full breach record for Hermann Financial Services →

Hermann Financial Services, Inc. notified the Delaware Attorney General of a data security incident involving unauthorized access to an employee email account between June 13, 2025, and June 25, 2025. The company determined that personal information of some individuals was accessed. The incident has been contained, and the company is offering complimentary identity monitoring services through Kroll. The specific data elements affected are redacted in the template, but the incident involves PII. No specific count of affected individuals is provided in the Delaware filing, though Rhode Island residents are mentioned separately.

J jump to incidentP pin to compareR raw source

Incident timeline

Jun 13, 2025

Begins

Oct 15, 2025

Filed

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Maine State AGbd_3eee47109c30e0fb2025-10-15Candidate
Vermont State AGbd_972bc365c4d0aff72025-10-15Verified

Name: Hermann Financial Services
norm: hermann financial

Name: Hermann Financial Services
norm: hermann financial
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Jun 13, 2025 – Jun 25, 2025
Materiality determined: —
Notification sent: Sep 15, 2025
Affected individuals: Not disclosed
Data types: PIIIdentity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External

During the incident: Took steps to secure the account
Investigated the activity
Secured the services of Kroll to provide identity monitoring at no cost
Changes made: Enhance the security of our email environment
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Maine State AGOct 15 · first

Vermont State AGOct 15 · first

Delaware State AGOct 15 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://attorneygeneral.delaware.gov/wp-content/uploads/sites/50/2026/01/HFS-Delaware-Attachment.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 15, 2025
Raw hash: 19cd282afb7ab6735cadb2bfd3c7e1e7382a750deb6545a71dfd7d73bb156715

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityHermann Financial Services

Victim entityHermann Financial Services

IncidentUnauthorized Access

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceattorneygeneral.delaware.gov