HackingStolen CredentialsData ExfiltratedCustomer Data InvolvedIDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNTMediumContained
NATALLIANCE SECURITIES, LLC
bd_efcb569c2b5e70ca · schema v1 · pii pii-v1
Full breach record for NATALLIANCE SECURITIES, LLC →NatAlliance Securities LLC notified the Maryland AG of a security incident on Dec 2, 2024, affecting one Maryland resident. Unauthorized actors accessed personal info including SSN, DOB, driver's license, medical records, and financial account numbers. NatAlliance engaged forensic investigators, notified the FBI, and offered credit monitoring.
Maryland clock⏱ MD AG >30d13 weeks discovery → filing
⚠ occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
This filing is one of 2 about the same incident.View merged incident
A leak claim by play about this victim predates this filing by 136 days.View originating leak claim
Linked disclosures
Why this link?Ransomware claims (1)
- bd_b3687733c1a07306Leak Siteplayfiled 2024-10-15(136d gap)Candidate
Source provenance
- Source URL
- https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376442.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Feb 28, 2025
- Raw hash
- bddf688ea510cf87a3e9c3a5e7458eae6eb9855890845009593e89edb0ac47aa
Reporting entity
- Name
- NATALLIANCE SECURITIES, LLCnorm: natalliance securities
- Domain
- natalliance.com
Victim entity
- Name
- NATALLIANCE SECURITIES, LLCnorm: natalliance securities
- Domain
- natalliance.com
Incident
- Discovered
- Dec 2, 2024
- Materiality determined
- —
- Notification sent
- Feb 28, 2025
- Affected individuals
- 1
- Data types
- IDENTITY_BASICIDENTITY_GOVERNMENTHEALTH_BASICFINANCIAL_ACCOUNT
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1041 Exfiltration Over C2 Channel
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified Maryland Attorney General
- Initial access
- valid_credentials
Compliance
- Time to disclose
- 13 weeks(88 days from discovery to filing)
- Compliance flags
- MD AG >30dLeak >90d
- Discovery-date grounding
- occurrence dateThe stored discovery date equals the breach OCCURRENCE date. Detection is normally later, so this OVERSTATES the delay — a 'late' verdict here may not be real.
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.