Social EngineeringFinancial ServicesFinancePhishingStolen CredentialsData ExfiltratedCustomer Data InvolvedGovernment IDIdentity (basic)FinancialMediumContained

THE EDELMAN FINANCIAL ENGINES CENTER, LLC

bd_d0f61c316195a5fe · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jan 7, 2026

Filed

Feb 9, 2026

To disclose

5 weeks

Affected

4state residents only

Linked

7 filings

Confidence

66%

Full breach record for THE EDELMAN FINANCIAL ENGINES CENTER, LLC →

Edelman Financial Engines reported a cybersecurity incident on January 7, 2026, where an unauthorized third party gained access to two employee accounts via social engineering. A small subset of client information, including SSNs and financial planning data, was accessed for 4 New Hampshire residents. Access was promptly terminated, and affected individuals were notified on January 28, 2026, with 24 months of credit monitoring offered.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 5 weeks / 33 days

Jan 7, 2026

Begins

Jan 7, 2026

Discovered

Feb 9, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 7 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (6) · sorted by filing gap

Massachusetts State AGbd_efdd59e2dc0fcabe2026-02-05 · +4dVerified
Maine State AGbd_1aa0940ef60364b62026-02-04 · +5dVerified
California State AGbd_789ad137708c3ca52026-02-04 · +5dCandidate
Vermont State AGbd_7ed7d43cfbd3ccbd2026-02-04 · +5dVerified

Show 2 more filings ↓up to 12d gap

Indiana State AGbd_088eccf424942d292026-01-28 · +12dVerified
Nebraska State AGbd_6b00116a4180fd792026-01-28 · +12dVerified

Name: THE EDELMAN FINANCIAL ENGINES CENTER, LLC
norm: the edelman financial engines center
Domain: edelmanfinancialengines.com

Name: THE EDELMAN FINANCIAL ENGINES CENTER, LLC
norm: the edelman financial engines center
Domain: edelmanfinancialengines.com
Industry: Financial Servicesllm

Discovered: Jan 7, 2026
Breach occurred: Jan 7, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jan 28, 2026
Affected individuals: 4state-resident count only
Data types: Government IDIdentity (basic)Financial
Data elements: Social Security numberDate of birth
Attack vector: Unauthorized Access
MITRE ATT&CK: T1566 Phishing
Threat actor: External
Regulator citations: Provided this notice of a cybersecurity event to the New Hampshire Consumer Protection Bureau
Initial access: phishing_link

During the incident: Promptly terminated the unauthorized access
Investigated the unauthorized activity with the support of external security experts
Sent formal notifications to these individuals via U.S. mail on January 28, 2026
Offering 24 months of complimentary credit monitoring and identity protection services through Kroll
Established a dedicated call center, accessed via a toll-free number, to answer individuals' questions
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 5 weeks(33 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 7 filings · 7 states

View merged incident ↗

Indiana State AGJan 28 · first

Nebraska State AGJan 28 · first

Maine State AG+7d

California State AG+7d

Vermont State AG+7d

Massachusetts State AG+8d

New Hampshire State AG+12d · this page

Pattern: first filing Jan 28 (IN), last Feb 9 (NH) — a 12-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/edelman-financial-engines-20260209.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 9, 2026
Raw hash: 5b57247eb7c486e8f752e2d0a6e2c0d565ccd32ddfdf4a750d61f0b0ac1cffa2

Linked disclosures

Regulatory filings (6) · sorted by filing gap

Reporting entityTHE EDELMAN FINANCIAL ENGINES CENTER, LLC

Victim entityTHE EDELMAN FINANCIAL ENGINES CENTER, LLC

Incidentdiscovered Jan 7, 2026

Stated responsePromptly terminated the unauthorized access

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov