MisuseFinancial ServicesFinanceData MishandlingCustomer Data InvolvedEmployee Data InvolvedPIIIDENTITY_BASICIDENTITY_GOVERNMENTMediumContained
AMERIPRISE FINANCIAL, INC.
bd_c5c50fa29c643346 · schema v1 · pii pii-v1
Full breach record for AMERIPRISE FINANCIAL, INC. →On April 29, 2025, an Ameriprise Financial Services advisor sent a document containing a client's name, address, and Social Security Number to their personal email account, violating company policy. The file was subsequently deleted and there is no indication of further access or misuse. One Maine resident was affected. Ameriprise notified the affected individual on May 5, 2025, and offered 12 months of Equifax Complete Premier credit and dark web monitoring.
Maine clockDiscovered Apr 29, 2025 → Filed with AG May 5, 20256d ✓ ME AG ≤30d6 days discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed1 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/b0808b89-a298-40ae-85a4-07e8e192d654.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- May 5, 2025
- Raw hash
- c0518eef6e9a2c20b6bf1ed75fe5ba88d5a0e92997d34f9de2aafefb9d47b02a
Reporting entity
- Name
- AMERIPRISE FINANCIAL, INC.norm: ameriprise financial
- Domain
- ameriprise.com
- Industry
- Financial Services
Victim entity
- Name
- AMERIPRISE FINANCIAL, INC.norm: ameriprise financial
- Domain
- ameriprise.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Apr 29, 2025
- Materiality determined
- —
- Notification sent
- May 5, 2025
- Affected individuals
- 1
- Data types
- PIIIDENTITY_BASICIDENTITY_GOVERNMENT
- Attack vector
- Insider
- Threat actor
- Internal
- Initial access
- insider_action
Compliance
- Time to disclose
- 6 days(6 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 6d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Apr 29, 2025→ Filed with AG: May 5, 20256d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.