Social EngineeringIdentity (basic)Government IDFinancial accountHealth (basic)MediumContained

AMERIPRISE FINANCIAL, INC.

bd_c0f50fa7c7256e5e · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Nov 20, 2025

To disclose

—

Affected

Not disclosed

Linked

2 filings

Confidence

67%

Full breach record for AMERIPRISE FINANCIAL, INC. →75 incidents on file

Ameriprise Financial Services, LLC reported a phishing incident where a financial advisor or staff member received a deceptive email appearing to be from a client. A bad actor potentially accessed or transmitted client information for a temporary period. No evidence of actual misuse was found. Affected data includes name, address, SSN, driver's license, financial account numbers, and medical information. Remediation includes enhanced caller verification, signature confirmation, and complimentary credit monitoring via Equifax.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Nov 20, 2025

Filed

—

Corroborated · see linked filings

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (1) · sorted by filing gap

Indiana State AGbd_3f1c0bfcb24016e72025-11-20Verified by operator

Name: AMERIPRISE FINANCIAL, INC.
norm: ameriprise financial
Domain: ameriprise.com

Name: AMERIPRISE FINANCIAL, INC.
norm: ameriprise financial
Domain: ameriprise.com

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountHealth (basic)
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing Link
Threat actor: ExternalFinancial
Initial access: phishing_link

During the incident: Instructing our service associates to use extra caution when verifying callers
Confirm the signature on written requests related to your accounts
Providing you an opportunity to enroll in an independently operated credit monitoring program
Changes made: Providing you an opportunity to enroll in an independently operated credit monitoring program
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 2 filings · 2 states

View merged incident ↗

Indiana State AGNov 20 · first

Nebraska State AGNov 20 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://nebraska.gov/ago/data-breach/documents/d57c8b3a-dc7c-4bea-80f1-091fd620583b.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Nov 20, 2025
Raw hash: a857e78555714430a7434f6900334fd05024993a04a175d75133faef851715da

Linked disclosures

Regulatory filings (1) · sorted by filing gap

Reporting entityAMERIPRISE FINANCIAL, INC.

Victim entityAMERIPRISE FINANCIAL, INC.

IncidentPhishing

Stated responseInstructing our service associates to use extra caution when verifying callers

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancenebraska.gov