HackingFinancial ServicesFinanceCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountPIIMediumResolved

Newbridge Securities Corporation

bd_d2ca3d9293e68dfe · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Oct 14, 2021

To disclose

—

Affected

Not disclosed

Linked

6 filings

Confidence

67%

Full breach record for Newbridge Securities Corporation →2 incidents on file

Newbridge Securities Corporation experienced a network intrusion by an unauthorized person between February 24 and March 18, 2021. The investigation, concluded August 30, 2021, could not confirm what data was accessed but could not rule out exposure of customer names, addresses, Social Security numbers, and account information. The company engaged a cybersecurity firm, secured the network, and implemented numerous remediation measures including MFA and enhanced logging.

J jump to incidentP pin to compareR raw source

Incident timeline

Feb 24, 2021

Begins

Aug 30, 2021

Scope determined

Oct 14, 2021

Filed

This filing is one of 6 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

Montana State AGbd_17038b233b71647e2021-10-14Candidate
Massachusetts State AGbd_29d0e1f53c68f5cf2021-10-14Verified
Maine State AGbd_8b3162b529c149d32021-10-14Verified by operator
New Hampshire State AGbd_ef2137acf08ba54a2021-10-14Verified

Show 1 more filing ↓up to 1d gap

Indiana State AGbd_5f354b0086510be12021-10-13 · +1dVerified

Name: Newbridge Securities Corporation
norm: newbridge securities

Name: Newbridge Securities Corporation
norm: newbridge securities
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Feb 24, 2021 – Mar 18, 2021
Materiality determined: Aug 30, 2021
Notification sent: —
Affected individuals: Not disclosed
Data types: Identity (basic)Government IDFinancial accountPII
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: External

During the incident: Took immediate steps to secure the network
Began an investigation
A cybersecurity firm was engaged to assist
Conducted a thorough review of potentially accessed information
Created a dedicated call center to answer any questions about the incident
Offering a complimentary one-year membership of Experian IdentityWorks
Changes made: Removing legacy authentication methods
Increasing audit logging on all systems
Applying hardening policies for greater encryption on system communication
Increasing the sensitivity of endpoint protection
Strengthening password policies to require greater complexity
Implementing multifactor authentication for both internal and remote network access
Strengthening email security efforts for identifying phishing or malicious content
Internal training for users to identify cyberattacks
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Indiana State AGOct 13 · first

Montana State AG+1d

Massachusetts State AG+1d

Maine State AG+1d

New Hampshire State AG+1d

California State AG+1d · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.ca.gov/ecrime/databreach/reports/sb24-546462
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 14, 2021
Raw hash: 8bc4ce101060a1e960c4cb9b22ee10b225921a64b8dc5841131e1fa76ff96ce3

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNewbridge Securities Corporation

Victim entityNewbridge Securities Corporation

IncidentUnauthorized Access

Stated responseTook immediate steps to secure the network

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenanceoag.ca.gov