Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsMulti-Stage ChainCustomer Data InvolvedPIIIdentity (basic)FinancialLowContained

Cascade Financial Services

bd_ca86a2365b109b09 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jul 9, 2024

Filed

Jan 16, 2025

To disclose

27 weeks

Affected

2state residents only

Linked

3 filings

Confidence

65%

Full breach record for Cascade Financial Services →

Cascade Financial Services notified New Hampshire residents of a data breach involving unauthorized access to employee email accounts. The incident occurred July 8-9, 2024, and was discovered on July 9, 2024. Affected data included personal information found in emails. Cascade engaged forensic specialists, secured the email tenant, and offered credit monitoring services to the two identified affected residents.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

discovery → filing · 27 weeks / 191 days

Jul 8, 2024

Begins

Jul 9, 2024

Discovered

Dec 31, 2024

Scope determined

Jan 16, 2025

Filed

vs. sector median

+19 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Montana State AGbd_aca2767e35859f402025-01-16Candidate
Maryland State AGbd_97597da02adefdfd2025-11-13 · +301dVerified

Name: Cascade Financial Services
norm: cascade financial

Name: Cascade Financial Services
norm: cascade financial
Also named: Southwest Stage Funding, LLCdba oflegal entity
Cascade Financial Servicesdba oftrade name
Industry: Financial Servicesllm

Discovered: Jul 9, 2024
Breach occurred: Jul 8, 2024 – Jul 9, 2024
Undetected for: 1 dayoccurrence → discovery
Materiality determined: Dec 31, 2024
Notification sent: Jan 16, 2025
Affected individuals: 2state-resident count only
Data types: PIIIdentity (basic)Financial
Attack vector: Phishing
MITRE ATT&CK: T1566.002 Spearphishing LinkT1114 Email Collection
Threat actor: ExternalFinancial
Regulator citations: Provided written notice to relevant state and federal regulatorsProvided written notice to the three major credit reporting agencies
Initial access: phishing_link

During the incident: Secured the email tenant
Initiated an investigation with the assistance of third-party forensic specialists
Engaged a data review vendor to conduct a comprehensive and time-intensive review
Providing access to credit monitoring services for individuals whose personal information was potentially affected
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Providing written notice of this incident to relevant state and federal regulators
Providing written notice to the three major credit reporting agencies
Changes made: Implementing additional safeguards and training to its employees
Implementing additional security measures to further protect against similar events occurring in the future
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 27 weeks(191 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Montana State AGJan 16 · first

New Hampshire State AGJan 16 · first · this page

Maryland State AG+301d

Pattern: first filing Jan 16 (MT), last Nov 13 (MD) — a 301-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/southwest-stage-funding-cascade-financial-20250116.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jan 16, 2025
Raw hash: 95362bd14b3fcbf47ced26bf003553b6987a192cf73febada673bdc62c14385a

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityCascade Financial Services

Victim entityCascade Financial Services

Incidentdiscovered Jul 9, 2024

Stated responseSecured the email tenant

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov