HackingFinancial ServicesFinanceStolen CredentialsSupply Chain (3P Vendor)Customer Data InvolvedMulti-Stage ChainIdentity (basic)Financial accountLowActive

CHARLES SCHWAB & CO., INC.

bd_e34e61886abd04ff · schema v1 · pii pii-v1

Severity

Low

Discovered

Apr 19, 2023

Filed

Jun 14, 2023

To disclose

8 weeks

Affected

3state residents only

Linked

4 filings

Confidence

66%

Full breach record for CHARLES SCHWAB & CO., INC. →31 incidents on file

Charles Schwab & Co., Inc. notified the NH Attorney General of a security breach involving 3 NH residents. A third-party call-center service provider accessed client accounts without authorization between March 6 and April 19, 2023. Schwab discovered the issue on April 19, 2023, locked accounts, and began notifying clients on June 9, 2023. Affected data included personal and financial account information. Schwab provided 24 months of credit monitoring.

J jump to incidentP pin to compareR raw source

Incident timeline

undetected · 44 days

discovery → filing · 8 weeks / 56 days

Mar 6, 2023

Begins

Apr 19, 2023

Discovered

Jun 14, 2023

Filed

vs. sector median

on median

This filing is one of 4 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (3) · sorted by filing gap

Indiana State AGbd_485155b6d7de3ff02023-06-09 · +5dVerified
Massachusetts State AGbd_86fdc3b0b78ecc8f2023-06-09 · +5dVerified
Maine State AGbd_8bbb2fd38bcf9c102023-06-08 · +6dCandidate

Name: CHARLES SCHWAB & CO., INC.
norm: charles schwab
Domain: schwab.com

Name: CHARLES SCHWAB & CO., INC.
norm: charles schwab
Domain: schwab.com
Industry: Financial Servicesllm

Discovered: Apr 19, 2023
Breach occurred: Mar 6, 2023 – Apr 19, 2023
Undetected for: 44 daysoccurrence → discovery
Materiality determined: —
Notification sent: Jun 9, 2023
Affected individuals: 3state-resident count only
Data types: Identity (basic)Financial account
Attack vector: Third-Party / Supply Chain
MITRE ATT&CK: T1078 Valid AccountsT1119 Automated Collection
Threat actor: Partner
Regulator citations: Notified New Hampshire Office of the Attorney General
Initial access: trusted_relationship

During the incident: Locked potentially affected accounts
Initiated a privileged investigation
Continuing to monitor for any signs of identity theft or fraud
Mailed written notification letters to affected clients
Provided credit monitoring and identity protection services through IdentityForce at no charge for a period of twenty-four months
Continued to apply multiple layers of security protections, including 24/7 monitoring of its systems and client accounts
Changes made: Continued to apply multiple layers of security protections, including 24/7 monitoring of its systems and client accounts
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 8 weeks(56 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 4 filings · 4 states

View merged incident ↗

Maine State AGJun 8 · first

Indiana State AG+1d

Massachusetts State AG+1d

New Hampshire State AG+6d · this page

Pattern: first filing Jun 8 (ME), last Jun 14 (NH) — a 6-day rolling notification. Rolling spreads often mean counsel is filing as thresholds trip per state. Why this link?

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/charles-schwab-20230614.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Jun 14, 2023
Raw hash: c6a72da1516022e7f9ef8645c221ac8a131ac882df55788a6c3c8997a363f82a

Linked disclosures

Regulatory filings (3) · sorted by filing gap

Reporting entityCHARLES SCHWAB & CO., INC.

Victim entityCHARLES SCHWAB & CO., INC.

Incidentdiscovered Apr 19, 2023

Stated responseLocked potentially affected accounts

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov