HackingFinancial ServicesFinanceSupply Chain (3P Vendor)Customer Data InvolvedFinancial accountIdentity (basic)LowContained

Purus Wealth Management

bd_ecc22c80eadb03b5 · schema v1 · pii pii-v1

Severity

Low

Discovered

—

Filed

Feb 5, 2026

To disclose

—

Affected

2state residents only

Confidence

67%

Full breach record for Purus Wealth Management →

Purus Wealth Management notified clients that their names and Charles Schwab account numbers were involved in a breach of external software used by the firm. The firm engaged cybersecurity partners, strengthened monitoring, and is offering one year of credit monitoring. No evidence of misuse was found.

J jump to incidentP pin to compareR raw source

Incident timeline — partial

? — ?

Breach window unknown

Feb 5, 2026

Filed

—

No filing yet · watching

Compliance clocks stay unassessable until a regulatory filing lands. Dashed segments fill in automatically when corroboration arrives.

Tracked as a single-filing incident — the only disclosure on record for this event so far.Confirmed2 affectedView incident

Name: Purus Wealth Management
norm: purus wealth management

Name: Purus Wealth Management
norm: purus wealth management
Industry: Financial Servicesllm

Discovered: —
Materiality determined: —
Notification sent: —
Affected individuals: 2state-resident count only
Data types: Financial accountIdentity (basic)
Attack vector: Third-Party / Supply Chain
Third party: via External software provider
Initial access: supply_chain

During the incident: Engaged leading cybersecurity partners to investigate
Strengthened monitoring and defenses, including Managed Detection and Response (MDR), ransomware detection, and ongoing penetration testing
Continued alignment with SEC security guidelines to ensure we meet or exceed regulatory standards
Partnered with our custodians to reinforce identify verification policies and procedures
Changes made: Providing 1 year of credit monitoring, upon request
Source: Quoted from the filing itself, not independently verified.

Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://www.mass.gov/doc/2026-173-purus-wealth-management/download
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 5, 2026
Raw hash: f0102f86ae725505bae64f63862853da99e1104ce4fa266cdef19638be19e52b

Reporting entityPurus Wealth Management

Victim entityPurus Wealth Management

IncidentThird-Party / Supply Chain

Stated responseEngaged leading cybersecurity partners to investigate

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancewww.mass.gov