HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedIdentity (basic)Government IDFinancial accountMediumContained

ASSETMARK, INC.

bd_e099e3ab62a70903 · schema v1 · pii pii-v1

Severity

Medium

Discovered

May 15, 2026

Filed

Jun 15, 2026

To disclose

4 weeks

Affected

850state residents only

Linked

12 filings

Confidence

66%

Full breach record for ASSETMARK, INC. →2 incidents on file

AssetMark, Inc. notified the Rhode Island Attorney General of a data security event involving unauthorized access to employee login credentials. On May 15, 2026, an unauthorized user accessed and downloaded files containing customer PII (names, SSNs, account numbers) affecting approximately 850 RI residents. AssetMark terminated access, reset credentials, engaged forensic investigators, and offered 24 months of credit monitoring. Notices were sent starting June 17, 2026.

J jump to incidentP pin to compareR raw source

Rhode Island clock✓ RI AG ≤45d4 weeks discovery → filing

⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Incident timeline

discovery → filing · 4 weeks / 31 days

May 15, 2026

Begins

May 15, 2026

Discovered

Jun 15, 2026

Filed

vs. sector median

4 wks faster

This filing is one of 12 filings about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (10) · sorted by filing gap

Texas State AGbd_30436bcce43994592026-06-18 · +3dVerified
Massachusetts State AGbd_6ed05ad3f644267a2026-06-12 · +3dCandidate
Washington State AGbd_33f04a386aea24d32026-06-11 · +4dVerified
Montana State AGbd_5589a85ddada03aa2026-06-11 · +4dVerified

Show 6 more filings ↓up to 23d gap

Oregon State AGbd_6886b6cefdfdb7fd2026-06-11 · +4dVerified
Delaware State AGbd_6af2c69a79abc5b22026-06-11 · +4dVerified
Nebraska State AGbd_7ac3f8543828d6ee2026-06-11 · +4dVerified
New Hampshire State AGbd_c7f8a628cbde3f8a2026-06-11 · +4dVerified
California State AGbd_b328f99afc4a52512026-06-26 · +11dVerified
Rhode Island State AGbd_cb19c05bc1b11d032026-07-08 · +23dVerified

Showing first 10 of 11 linked disclosures.

Name: Keesal, Young & Logan
norm: keesal young logan
Domain: kyl.com

Name: ASSETMARK, INC.
norm: assetmark
Industry: Financial Servicesllm

Discovered: May 15, 2026
Breach occurred: May 15, 2026
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 17, 2026
Affected individuals: 850state-resident count only
Data types: Identity (basic)Government IDFinancial account
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid Accounts
Threat actor: ExternalFinancial
Regulator citations: providing notice of this incident to state regulators
Initial access: valid_credentials

During the incident: Terminating the unauthorized access
Re-setting employee credentials
Engaging internal and external information security professionals to conduct a forensic investigation
Increasing systems monitoring
Implementing additional security safeguards
Providing notice of this incident to state regulators
Providing notice of this incident to the three major credit reporting agencies: Equifax, Experian, and TransUnion
Changes made: Offering access to twenty-four (24) months of complimentary credit monitoring and identity restoration services through Epiq Privacy Solutions
Providing impacted individuals with guidance on how to better protect against identity theft and fraud
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 4 weeks(31 days from discovery to filing)
Compliance flags: RI AG ≤45d
Discovery-date grounding: occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 11 filings · 10 states

View merged incident ↗

Washington State AGJun 11 · first

Montana State AGJun 11 · first

Oregon State AGJun 11 · first

Delaware State AGJun 11 · first

Nebraska State AGJun 11 · first

New Hampshire State AGJun 11 · first

Massachusetts State AG+1d

Rhode Island State AG+4d · this page

Texas State AG+7d

California State AG+15d

Rhode Island State AG+27d

Pattern: first filing Jun 11 (WA), last Jul 8 (RI) — a 27-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Cascade drawn from the first 10 linked disclosures of 11 — the full spread may be wider.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://riag.ri.gov/media/8791/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 15, 2026
Raw hash: d73ccea8457fa24ce62f390071fb1a21b2df68885c76b3bfc005f1ae65591669

Linked disclosures

Regulatory filings (10) · sorted by filing gap

Reporting entityKeesal, Young & Logan

Victim entityASSETMARK, INC.

Incidentdiscovered May 15, 2026

Stated responseTerminating the unauthorized access

ComplianceRI AG ≤45d

Extraction provenanceno artifact recorded

Source provenanceriag.ri.gov