HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedFinancial accountIdentity (basic)Government IDMediumContained

Mariner Wealth Advisors, LLC

bd_b1757d3f97946462 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Nov 24, 2025

Filed

Jun 2, 2026

To disclose

27 weeks

Affected

117state residents only

Linked

7 filings

Confidence

64%

Full breach record for Mariner Wealth Advisors, LLC →2 incidents on file

Mariner Wealth Advisors, LLC notified Massachusetts and other state regulators of a security incident involving unauthorized access to three associates' cloud applications. Discovered November 24, 2025, a criminal third party accessed accounts and downloaded files containing names, account numbers, dates of birth, and SSNs/government IDs. The incident was isolated to these apps; core financial systems were unaffected. Mariner contained the breach, engaged law enforcement and forensic researchers, and is offering 24 months of complimentary credit monitoring.

J jump to incidentP pin to compareR raw source

Massachusetts clock✗ MA AG >90d27 weeks discovery → filing

Incident timeline

discovery → filing · 27 weeks / 190 days

Nov 24, 2025

Discovered

Jun 2, 2026

Filed

vs. sector median

+18 wks slower

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

California State AGbd_042e1d26630afaf72026-06-01 · +1dVerified
Washington State AGbd_7b9c677fce6b96d22026-06-01 · +1dVerified
Maine State AGbd_dc209b391466c5de2026-06-01 · +1dVerified
New Hampshire State AGbd_fe3948411c5ce93d2026-06-01 · +1dVerified

Show 2 more filings ↓up to 4d gap

Indiana State AGbd_01f2ddbfef6a94ce2026-05-29 · +4dVerified
Nebraska State AGbd_9cf755fca5b2e75e2026-05-29 · +4dVerified

Name: Mariner Wealth Advisors, LLC
norm: mariner wealth advisors

Name: Mariner Wealth Advisors, LLC
norm: mariner wealth advisors
Industry: Financial Servicesllm

Discovered: Nov 24, 2025
Materiality determined: —
Notification sent: May 29, 2026
Affected individuals: 117state-resident count only
Data types: Financial accountIdentity (basic)Government ID
Data elements: Date of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1190 Exploit Public-Facing Application
Threat actor: ExternalFinancial
Regulator citations: communicating with federal law enforcement and regulatory authorities
Initial access: valid_credentials

During the incident: Initiated its incident response plan
Began containment measures
Accounts were immediately isolated, secured, and analyzed
Communicating with federal law enforcement and regulatory authorities
Engaged third-party researchers to monitor websites, forums and other online sources for signs of data misuse
Changes made: Referenced cloud applications have been secured
Continue to emphasize cybersecurity awareness in our employee training materials
Working with our external advisors to fortify our cybersecurity defenses
Offering complimentary credit monitoring service for the next twenty-four (24) months
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(190 days from discovery to filing)
Compliance flags: MA AG >90d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGMay 29 · first

Nebraska State AGMay 29 · first

California State AG+3d

Washington State AG+3d

Maine State AG+3d

New Hampshire State AG+3d

Massachusetts State AG+4d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-892-mariner-wealth-advisors-llc/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 2, 2026
Raw hash: b576d449b919d00fd8272739e9f681e5d8a58e5f73563b896fee8a9fbc7fe08c

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityMariner Wealth Advisors, LLC

Victim entityMariner Wealth Advisors, LLC

Incidentdiscovered Nov 24, 2025

Stated responseInitiated its incident response plan

ComplianceMA AG >90d

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov