HackingProfessional ServicesProfessional ServicesStolen CredentialsData ExfiltratedCustomer Data InvolvedIdentity (basic)LowContained

Newport Advisory Partners

bd_d60ba67fa8a20525 · schema v1 · pii pii-v1

Severity

Low

Discovered

Jan 12, 2025

Filed

Apr 25, 2025

To disclose

15 weeks

Affected

19state residents only

Linked

6 filings

Confidence

65%

Full breach record for Newport Advisory Partners →

Newport Advisory, LLC experienced a cybersecurity incident resulting in unauthorized access to its computer systems. Suspicious activity was detected on January 12, 2025. Investigation revealed files containing personal information (names) were copied in late December 2024. The company engaged law enforcement and external experts, took the network offline, and is offering 2 years of credit monitoring. No evidence of misuse was found at the time of notification.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 42 days

discovery → filing · 15 weeks / 103 days

Dec 1, 2024

Begins

Jan 12, 2025

Discovered

Apr 25, 2025

Filed

vs. sector median

4 wks faster

This filing is one of 6 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (5) · sorted by filing gap

California State AGbd_4f22cd2f3c52b6382025-04-25Verified
Maine State AGbd_69448329b3586e052025-04-25Verified
Nebraska State AGbd_1784590b435af6a32025-04-24 · +1dCandidate
Indiana State AGbd_9f9d300762068a8d2025-04-24 · +1dVerified

Show 1 more filing ↓up to 3d gap

New Hampshire State AGbd_13bf99e5ca8ff7062025-04-28 · +3dVerified

Name: Newport Advisory Partners
norm: newport advisory
Domain: newportap.com

Name: Newport Advisory Partners
norm: newport advisory
Domain: newportap.com
Industry: Professional Servicesllm

Discovered: Jan 12, 2025
Breach occurred: Dec 1, 2024 – Dec 31, 2024
Undetected for: 42 daysoccurrence → discovery
Materiality determined: —
Notification sent: Apr 24, 2025
Affected individuals: 19state-resident count only
Data types: Identity (basic)
Attack vector: Unauthorized Access
MITRE ATT&CK: T1041 Exfiltration Over C2 ChannelT1119 Automated Collection
Threat actor: ExternalFinancial
Regulator citations: notified law enforcement
Initial access: valid_credentials

During the incident: Took the entire Newport Advisory network offline
Notified law enforcement
Engaged external cybersecurity experts to investigate
Implemented additional security monitoring tools and configuration changes
Offered a 2-year complimentary credit monitoring service offered by Experian
Changes made: Integrating all of our IT systems into the Mariner network and cybersecurity program
Implemented additional security monitoring tools and configuration changes within the Newport environment
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 15 weeks(103 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 6 filings · 6 states

View merged incident ↗

Nebraska State AGApr 24 · first

Indiana State AGApr 24 · first

California State AG+1d

Maine State AG+1d

Montana State AG+1d · this page

New Hampshire State AG+4d

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://dojmt.gov/wp-content/uploads/2025/04/Consumer-notification-letter-28.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Apr 25, 2025
Raw hash: 879e298c0b15c00296f702f960565d886c1d2a7fafd66a117bd7102c08f37c91

Linked disclosures

Regulatory filings (5) · sorted by filing gap

Reporting entityNewport Advisory Partners

Victim entityNewport Advisory Partners

Incidentdiscovered Jan 12, 2025

Stated responseTook the entire Newport Advisory network offline

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancedojmt.gov