HackingFinancial ServicesFinanceStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDMediumContained

ASSETMARK, INC.

bd_b328f99afc4a5251 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 15, 2026

Filed

Jun 26, 2026

To disclose

6 weeks

Affected

Not disclosed

Linked

11 filings

Confidence

65%

Full breach record for ASSETMARK, INC. →2 incidents on file

AssetMark, Inc., a wealth management platform, reported that on May 15, 2026, an unauthorized user accessed and downloaded files containing customer personal information using compromised employee login credentials. The company terminated access, reset credentials, engaged forensic investigators, and is offering 24 months of credit monitoring to affected individuals.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 6 weeks / 42 days

May 15, 2026

Begins

May 15, 2026

Discovered

Jun 26, 2026

Filed

vs. sector median

2 wks faster

This filing is one of 11 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Texas State AGbd_30436bcce43994592026-06-18 · +8dVerified
Rhode Island State AGbd_e099e3ab62a709032026-06-15 · +11dVerified
Rhode Island State AGbd_cb19c05bc1b11d032026-07-08 · +12dVerified
Massachusetts State AGbd_6ed05ad3f644267a2026-06-12 · +14dCandidate

Show 6 more filings ↓up to 15d gap

Washington State AGbd_33f04a386aea24d32026-06-11 · +15dVerified
Oregon State AGbd_6886b6cefdfdb7fd2026-06-11 · +15dVerified
Delaware State AGbd_6af2c69a79abc5b22026-06-11 · +15dVerified
Nebraska State AGbd_7ac3f8543828d6ee2026-06-11 · +15dVerified
New Hampshire State AGbd_c7f8a628cbde3f8a2026-06-11 · +15dVerified
Vermont State AGbd_d0136116688cfee02026-06-11 · +15dVerified

Name: ASSETMARK, INC.
norm: assetmark

Name: ASSETMARK, INC.
norm: assetmark
Industry: Financial Servicesllm

Discovered: May 15, 2026
Breach occurred: May 15, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government ID
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
Threat actor: External
Initial access: valid_credentials

During the incident: Immediately terminating the unauthorized access
Re-setting employee credentials
Engaging internal and external information security professionals to conduct a forensic investigation
Increasing systems monitoring
Implementing additional security safeguards
Offering credit monitoring and identity theft prevention services at no cost to you for 24 months
Changes made: Implementing additional security safeguards
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 6 weeks(42 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Washington State AGJun 11 · first

Oregon State AGJun 11 · first

Delaware State AGJun 11 · first

Nebraska State AGJun 11 · first

New Hampshire State AGJun 11 · first

Vermont State AGJun 11 · first

Massachusetts State AG+1d

Rhode Island State AG+4d

Texas State AG+7d

California State AG+15d · this page

Rhode Island State AG+27d

Pattern: first filing Jun 11 (WA), last Jul 8 (RI) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-625610
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 26, 2026
Raw hash: 955acc802279636a888be9c9985285df1f6820be6b8f9ac19b69a21f74cfd28d

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityASSETMARK, INC.

Victim entityASSETMARK, INC.

Incidentdiscovered May 15, 2026

Stated responseImmediately terminating the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov