HackingIdentity (basic)Government IDFinancial accountMediumContained

Towerpoint Wealth, LLC

bd_b81093b4a8102592 · schema v1 · pii pii-v1

Severity

Medium

Discovered

Apr 27, 2026

Filed

Jun 5, 2026

To disclose

—

Affected

1state residents only

Linked

3 filings

Confidence

67%

Full breach record for Towerpoint Wealth, LLC →

Towerpoint Wealth LLC, a wealth advisory firm, notified the Nebraska Attorney General of a cybersecurity incident discovered on April 27, 2026. An unauthorized party accessed and copied files containing names, SSNs, driver's license numbers, and financial account information. One Nebraska resident was affected. Towerpoint engaged a third-party forensic firm, offered 12 months of credit monitoring, and implemented additional cybersecurity measures.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >30d

Incident timeline

Apr 27, 2026

Discovered

Jun 5, 2026

Filed

This filing is one of 3 about the same incident.View merged incident

A leak claim by shinyhunters about this victim predates this filing by 35 days.View originating leak claim

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteshinyhuntersbd_641f01626d3fe1c62026-04-30 · +35dVerified by operator

Regulatory filings (1) · sorted by filing gap

California State AGbd_e8fe19f994dbdf432026-06-05Verified

Name: Towerpoint Wealth, LLC
norm: towerpoint wealth
Domain: towerpointwealth.com

Name: Towerpoint Wealth, LLC
norm: towerpoint wealth
Domain: towerpointwealth.com

Discovered: Apr 27, 2026
Materiality determined: —
Notification sent: Jun 5, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External
Regulator citations: Notified Nebraska Attorney General's Office
Initial access: valid_credentials

During the incident: Engaged of a third-party cybersecurity firm to contain its environment and conduct a forensic investigation
Offering twelve (12) months of complimentary credit monitoring and identity theft restoration services through Cyberscout, a TransUnion company
Changes made: Implemented and will continue to implement additional cybersecurity measures as well as policies and procedures to safeguard sensitive information within its care
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >30d
Discovery-date grounding: letter-groundedThe discovery date is the detection date narrated in the notification letter — the defensible tier.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

California State AGJun 5 · first

Nebraska State AGJun 5 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/962dd321-161d-4a46-b801-0c636e8364d2.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 5, 2026
Raw hash: 0c77db57067ece8a5f9d241ca6b0eda6b7bf3a431022fc68c40f0a98a1cfdf41

Linked disclosures

Ransomware claims (1)

Regulatory filings (1) · sorted by filing gap

Reporting entityTowerpoint Wealth, LLC

Victim entityTowerpoint Wealth, LLC

Incidentdiscovered Apr 27, 2026

Stated responseEngaged of a third-party cybersecurity firm to contain its environment and conduct a forensic investigation

ComplianceLeak >30d

Extraction provenanceno artifact recorded

Source provenancenebraska.gov