HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedSupply Chain (3P Vendor)Identity (basic)Financial accountLowContained

J. Michael May

bd_c0fe4b8615938077 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jun 22, 2026

Filed

Aug 10, 2026

To disclose

7 weeks

Affected

1state residents only

Confidence

66%

Full breach record for J. Michael May →

J. Michael May, a financial advisor, notified the NH Attorney General of a cybersecurity event affecting one New Hampshire resident. On June 22, 2026, May identified unusual activity in customer accounts. An investigation revealed an unauthorized actor accessed May's iCloud account on June 15, 2026, acquiring an iPhone backup containing financial institution credentials. The actor accessed customer accounts between June 15 and June 23, 2026. On July 27, 2026, May determined the actor may have accessed the name and financial account number of one NH resident. May secured the accounts, notified Osaic Wealth (the platform provider), engaged third-party cybersecurity firms, and is offering 12 months of credit monitoring. The incident is contained.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 7 days

discovery → filing · 7 weeks / 49 days

Jun 15, 2026

Begins

Jun 22, 2026

Discovered

Aug 10, 2026

Filed

vs. sector median

1 wks faster

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident

Name: J. Michael May
norm: j michael may

Name: J. Michael May
norm: j michael may
Industry: Financial Servicesllm

Discovered: Jun 22, 2026
Breach occurred: Jun 15, 2026 – Jun 23, 2026
Undetected for: 7 daysoccurrence → discovery
Materiality determined: —
Notification sent: Aug 10, 2026
Affected individuals: 1state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified Office of the Attorney General of New Hampshire
Third party: via Osaic Wealth, Inc.
Initial access: valid_credentials

During the incident: Worked to secure the accounts
Launched an investigation with the assistance of third-party cybersecurity firms
Notified Osaic and the account custodian
Worked with them to terminate the unauthorized access
Established a dedicated call center that individuals can call with questions about the incident
Offering you a complimentary 12 months membership of credit monitoring and identity theft protection services by Cyberscout
Changes made: Taken steps to enhance its existing security measures
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 7 weeks(49 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/j-michael-may-20260810.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Aug 10, 2026
Raw hash: 10b0790e22b5597fab8e80488dd8872a078d7c45c00abeb33d05d45d624ce33f

Reporting entityJ. Michael May

Victim entityJ. Michael May

Incidentdiscovered Jun 22, 2026

Stated responseWorked to secure the accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov