HackingFinancial ServicesFinanceData ExfiltratedCustomer Data InvolvedIdentity (basic)Government IDHealth (basic)Financial accountMediumActive

NATALLIANCE SECURITIES, LLC

bd_efcb569c2b5e70ca · schema v1 · pii pii-v1

Severity

Medium

Discovered

—

Filed

Feb 28, 2025

To disclose

—

Affected

1state residents only

Linked

2 filings

Confidence

64%

Full breach record for NATALLIANCE SECURITIES, LLC →

NatAlliance Securities LLC notified the Maryland Attorney General of a security incident on or about December 2, 2024, affecting approximately one Maryland resident. An unauthorized actor accessed and downloaded documents containing personal information, including names, SSNs, dates of birth, driver's license numbers, medical records, passport numbers, bank account numbers, routing numbers, and brokerage account numbers. The company contained the threat, engaged external cybersecurity professionals, and notified the FBI. The investigation is ongoing. Affected individuals are being offered complimentary credit monitoring services.

J jump to incidentP pin to compareR raw source

Leak gap clock⏱ Leak >90d

⚠ no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Incident timeline

Dec 2, 2024

Begins

Feb 28, 2025

Filed

This filing is one of 2 about the same incident.View merged incident

Linked disclosures

Why this link?

Ransomware claims (1)

Leak Siteplaybd_b3687733c1a073062024-10-15 · +136dCandidate

Name: NATALLIANCE SECURITIES, LLC
norm: natalliance securities
Domain: natalliance.com

Name: NATALLIANCE SECURITIES, LLC
norm: natalliance securities
Domain: natalliance.com
Industry: Financial Servicesllm

Discovered: —
Breach occurred: Dec 2, 2024
Materiality determined: —
Notification sent: Feb 28, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDHealth (basic)Financial account
Data elements: Date of birthMedical information
Attack vector: Unknown
MITRE ATT&CK: T1041 Exfiltration Over C2 Channel
Threat actor: External
Regulator citations: Notified the Maryland Attorney GeneralNotified the FBI

During the incident: Contained and secured the threat
Commenced a prompt and thorough investigation
Engaged external cybersecurity professionals
Notified the FBI of the incident
Changes made: Reviewing its existing policies relating to data protection
Enhancing security measures and monitoring tools
Continually evaluates and modifies practices to enhance the security and privacy of personal information
Source: Quoted from the filing itself, not independently verified.

Compliance flags: Leak >90d
Discovery-date grounding: no discovery dateNo discovery date was extracted, so no notification clock can be evaluated.

Status: No extraction artifact recorded for this disclosure.

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://oag.maryland.gov/resources-info/SBN%20Documents/2025/ITU-376442.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Feb 28, 2025
Raw hash: bddf688ea510cf87a3e9c3a5e7458eae6eb9855890845009593e89edb0ac47aa

Linked disclosures

Ransomware claims (1)

Reporting entityNATALLIANCE SECURITIES, LLC

Victim entityNATALLIANCE SECURITIES, LLC

IncidentUnknown

Stated responseContained and secured the threat

ComplianceLeak >90d

Extraction provenanceno artifact recorded

Source provenanceoag.maryland.gov