HackingFinancial ServicesTechnologyFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)PIIHighContained

DRIVEWEALTH, LLC

bd_cdc9f273200ddbc8 · schema v1 · pii pii-v2

Severity

High

Discovered

Sep 5, 2026

Filed

Oct 1, 2026

To disclose

—

Affected

317,303state residents only

Linked

7 filings

Confidence

68%

Full breach record for DRIVEWEALTH, LLC →

DriveWealth, LLC reported unauthorized network access occurring between September 4 and 5, 2026. The incident resulted in the exfiltration of customer PII, including full names. DriveWealth contained the compromise on September 5, 2026, and concluded its investigation on September 28, 2026. Approximately 62,074 Rhode Island residents were explicitly identified as impacted. The company provided 12 months of complimentary credit monitoring and fraud assistance through Cyberscout/TransUnion. No identity fraud reports were known at the time of filing.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 1 days

Sep 4, 2026

Begins

Sep 5, 2026

Discovered

Oct 1, 2026

Filed

This filing is one of 7 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Texas State AGbd_28bb5fc180c0b90a2026-10-02 · +1dVerified
California State AGbd_b38a2f757806b77b2026-09-30 · +1dCandidate
South Carolina State AGbd_389a513f4e27d1032026-09-29 · +2dVerified
Iowa State AGbd_4073e70b3c0460912026-09-29 · +2dVerified

Show 2 more filings ↓up to 12d gap

Delaware State AGbd_e1476c56dcc944132026-09-29 · +2dVerified
Washington State AGbd_05223f0c5d38f06d2026-10-13 · +12dVerified

Name: DRIVEWEALTH, LLC
norm: drivewealth

Name: DRIVEWEALTH, LLC
norm: drivewealth
Industry: Financial ServicesllmTechnologyllm

Discovered: Sep 5, 2026
Breach occurred: Sep 4, 2026 – Sep 5, 2026
Undetected for: 1 dayoccurrence → discovery
Materiality determined: —
Notification sent: —
Affected individuals: 317,303state-resident count only
Data types: Identity (basic)PII
Attack vector: Unauthorized Access
MITRE ATT&CK: T1119 Automated Collection
Threat actor: External

During the incident: Launched an investigation in consultation with outside cybersecurity professionals
Contained the compromise on September 5, 2026
Provided access to Triple Bureau Credit Monitoring/Triple Bureau Credit Report services at no charge for 12 months
Provided proactive fraud assistance through Cyberscout, a TransUnion company
Set up a dedicated and confidential toll-free response line
Established an email handle for questions
Directed customers to legal.drivewealth.com/cyber-response
Changes made: Continually evaluate and modify practices and internal controls to enhance the security and privacy of your information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

South Carolina State AGSep 29 · first

Iowa State AGSep 29 · first

Delaware State AGSep 29 · first

California State AG+1d

Massachusetts State AG+2d · this page

Texas State AG+3d

Washington State AG+14d

Pattern: first filing Sep 29 (SC), last Oct 13 (WA) — a 14-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1706-drivewealth/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 1, 2026
Raw hash: c1906cd35d5528729a403184321cc93edf9c05677b4bb4a5d338783e736e1eae

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityDRIVEWEALTH, LLC

Victim entityDRIVEWEALTH, LLC

Incidentdiscovered Sep 5, 2026

Stated responseLaunched an investigation in consultation with outside cybersecurity professionals

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov