JOHNSON INVESTMENT COUNSEL, INC.
bd_bdbd65dbe5a9256b · schema v1 · pii pii-v2
Full breach record for JOHNSON INVESTMENT COUNSEL, INC. →Johnson Investment Counsel notified affected individuals of a cybersecurity incident involving unauthorized access to systems via a third-party managed service provider's remote-management platform. The incident occurred between the evening of September 8, 2026, and the early morning of September 9, 2026, and was discovered on September 9, 2026. An unauthorized party acquired copies of files containing names, Social Security numbers, and health insurance information. The company contained the activity, engaged cybersecurity professionals, and reported the incident to law enforcement. Affected individuals are offered two years of credit monitoring.
J jump to incidentP pin to compareR raw source
Incident timeline
Sep 8, 2026
Begins
Sep 9, 2026
Discovered
Oct 1, 2026
Filed
Linked disclosures
Why this link?Ransomware claims (1)
- Leak Sitestormbd_e2ac799f3705891c2026-09-18 · +13dCandidate
Regulatory filings (1) · sorted by filing gap
- Vermont State AGbd_d07e88bc177187002026-10-16 · +15dVerified by operator
Filing propagation · 2 filings · 2 states
View merged incident ↗Pattern: first filing Oct 1 (MA), last Oct 16 (VT) — a 15-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?
Evidence ladder
Attacker assertion only. Establishes: claim date, group, alleged victim.
Unlocks: incident narrative, operational impact. Still no compliance clock.
Unlocks: discovery date, data types, affected count, compliance clock.
Unlocks: materiality, stated response, full audit trail. Ceiling removed.