HackingFinancial ServicesFinanceStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryPIIIDENTITY_BASICLowContained
McKAY
bd_ddb607a9e99e0490 · schema v1 · pii pii-v1
Full breach record for McKAY →McKay Wealth Management, a financial planning and asset management firm, discovered unauthorized access to an employee email account occurring between June 28, 2024 and September 19, 2024. The data review was completed around April 6, 2025. Personal information including names and unspecified data elements was exposed. McKay secured the account, notified federal law enforcement, reviewed policies, and offered 24-month Experian IdentityWorks credit monitoring to affected individuals.
This filing is one of 6 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (5) · sorted by filing gap
- bd_1234ce5e7de272d9Montana State AGfiled 2025-06-12Candidate
- bd_9e4d37701b496abfNew Hampshire State AGfiled 2025-06-12Verified
- bd_b890167b322cbf32Oregon State AGfiled 2025-06-12Verified by operator
- bd_be4ec609474d24efIndiana State AGfiled 2025-06-12Verified
Show 1 more filing ↓Show fewer ↑
- bd_ddbea17b3be79a35Washington State AGfiled 2025-06-12Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-603973
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Jun 12, 2025
- Raw hash
- e4a9238b11ddb7d1c78e90c83c284409fd7a3fb0133211b64e6e1055dd425642
Reporting entity
- Name
- McKAYnorm: mckay
- Domain
- mckaybooks.com
Victim entity
- Name
- McKAYnorm: mckay
- Domain
- mckaybooks.com
- Industry
- Financial Servicesllm
Incident
- Discovered
- —
- Materiality determined
- —
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PIIIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- External
- Regulator citations
- Notified California Attorney GeneralNotified federal law enforcement
- Initial access
- valid_credentials
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.