HackingFinancial ServicesFinanceCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

CAZ Investments

bd_db07c12778574bb9 · schema v1 · pii pii-v2

Severity

Medium

Discovered

—

Filed

Sep 1, 2026

To disclose

—

Affected

413state residents only

Linked

5 records

Confidence

70%

Full breach record for CAZ Investments →

CAZ Investments LP notified individuals of an unauthorized third-party intrusion between August 8 and August 12, 2026. The breach potentially exposed names, addresses, dates of birth, SSNs, government IDs, and financial account information. The company engaged cybersecurity experts and law enforcement, contained the incident, and offered 24 months of identity protection services.

J jump to incidentP pin to compareR raw source

Incident timeline

Aug 8, 2026

Begins

Sep 1, 2026

Filed

This filing is one of 5 records about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Sitethegentlemenbd_4b5cdadb1207e4932026-08-21 · +11dCandidate

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_092d9f8795d7e8de2026-09-23 · +22dVerified
Texas State AGbd_0afc954ca263bb4a2026-09-29 · +28dVerified
New Hampshire State AGbd_37058eccbb0fcf082026-09-30 · +29dVerified

Name: CAZ Investments
norm: caz investments
Domain: cazinvestments.com

Name: CAZ Investments
norm: caz investments
Domain: cazinvestments.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Aug 8, 2026 – Aug 12, 2026
Materiality determined: —
Notification sent: Sep 23, 2026
Affected individuals: 413state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: External

During the incident: Took immediate action to review this incident and secure our systems
Working with third-party cybersecurity experts and law enforcement
Implemented additional security measures to help further protect against this type of incident going forward
Offering complimentary access to identity theft protection services through IDX at no cost to you
Changes made: Implemented additional security measures to help further protect against this type of incident going forward
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Massachusetts State AGSep 1 · first · this page

Indiana State AG+22d

Texas State AG+28d

New Hampshire State AG+29d

Pattern: first filing Sep 1 (MA), last Sep 30 (NH) — a 29-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-1650-caz-investments-lp/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Sep 1, 2026
Raw hash: bf1fe31c52094bf8c712761d643a22d705a2bf6e8b2611f8b5b86390a3f4f7d8

Linked disclosures

Ransomware claims (1)

Regulatory filings (3) · sorted by filing gap

Reporting entityCAZ Investments

Victim entityCAZ Investments

IncidentUnauthorized Access

Stated responseTook immediate action to review this incident and secure our systems

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov