HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedData ExfiltratedDelayed DiscoveryPIIFINANCIALLowContained
CW Advisors, LLC
bd_db1c4c08f1c6b94d · schema v1 · pii pii-v1
Full breach record for CW Advisors, LLC →CW Advisors LLC (financial services, Boston MA) discovered on July 14, 2025 that a single employee email account was accessed without authorization between April 24 and June 2, 2025 by an unknown external actor. The compromised account contained personal information including name and financial account information. Seven Maine residents were affected. Written notice was sent August 13, 2025. CWA offered 12 months of Experian IdentityWorks credit monitoring to affected individuals.
Maine clockDiscovered Jul 14, 2025 → Filed with AG Aug 13, 202530d ✓ ME AG ≤30d4 weeks discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed7 affectedView incident
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/bdddb10b-6bb2-4e21-b82a-2834bc55faa8.html
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Aug 13, 2025
- Raw hash
- d73799357c6aca79bd2de98c576930bcc5a2aec22e6d7f4ccfec0deaa4346a91
Reporting entity
- Name
- CW Advisors, LLCnorm: cw advisors
- Domain
- cwadvisorsgroup.com
- Industry
- Financial Services
Victim entity
- Name
- CW Advisors, LLCnorm: cw advisors
- Domain
- cwadvisorsgroup.com
- Industry
- Financial Services
- Industry
- Financial Servicesllm
Incident
- Discovered
- Jul 14, 2025
- Materiality determined
- —
- Notification sent
- Aug 13, 2025
- Affected individuals
- 7
- Data types
- PIIFINANCIAL
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Maine Attorney General notified
Compliance
- Time to disclose
- 4 weeks(30 days from discovery to filing)
- Compliance flags
- ME AG ≤30d · 30d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Jul 14, 2025→ Filed with AG: Aug 13, 202530d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.