DisclosureLens
HackingFinanceIdentity (basic)Government IDPIIMediumContained

Young & Company

bd_bf1acc7911a80b19 · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

May 11, 2026

To disclose

—

Affected

6state residents only

Linked

3 filings

Confidence

67%
Full breach record for Young & Company →

Young & Company LLC notified Massachusetts residents via letter dated May 11, 2026, that an involved email account was compromised, exposing recipients' names and other data elements. The company conducted an investigation and offered two years of complimentary credit monitoring through IDX. No specific ransomware, phishing, or financial fraud was reported.

Incident timeline — partial

? — ?

Breach window unknown

May 11, 2026

Filed

No interval is drawn: no breach start or discovery date is on record for this filing.

This filing is one of 3 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Filing propagation · 3 filings · 3 states

View merged incident ↗
Indiana State AGMay 11 · first
Maine State AGMay 11 · first
Massachusetts State AGMay 11 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.