HackingFinancial ServicesFinanceStolen CredentialsCustomer Data InvolvedDelayed DiscoveryIdentity (basic)Government IDFinancial accountMediumContained

McAdam

bd_f0a27fe98341637e · schema v1 · pii pii-v1

Severity

Medium

Discovered

Jul 16, 2025

Filed

Oct 9, 2025

To disclose

12 weeks

Affected

1state residents only

Linked

3 filings

Confidence

66%

Full breach record for McAdam →3 incidents on file

McAdam Financial Group detected unauthorized access to an email account on July 16, 2025. The incident affected one New Hampshire resident, exposing name, Social Security number, and financial account information. The company secured the account, engaged forensic investigators, and notified the affected individual and regulators on October 9, 2025, offering credit monitoring services.

J jump to incidentP pin to compareR raw source

Incident timeline

discovery → filing · 12 weeks / 85 days

Jul 16, 2025

Begins

Jul 16, 2025

Discovered

Oct 9, 2025

Filed

vs. sector median

+4 wks slower

This filing is one of 3 about the same incident.View merged incident

Linked disclosures

Why this link?

Regulatory filings (2) · sorted by filing gap

Indiana State AGbd_0b10632b9717f0a32025-10-09Candidate
Massachusetts State AGbd_a7d5f181043f30d82025-10-09Verified

Name: McAdam Financial Group
norm: mcadam financial group
Domain: cipriani.com

Name: McAdam
norm: mcadam
Domain: mcadamfa.com
Industry: Financial Servicesllm

Discovered: Jul 16, 2025
Breach occurred: Jul 16, 2025
Undetected for: 0 daysoccurrence → discovery
Materiality determined: —
Notification sent: Oct 9, 2025
Affected individuals: 1state-resident count only
Data types: Identity (basic)Government IDFinancial account
Data elements: Social Security number
Attack vector: Unauthorized Access
MITRE ATT&CK: T1078 Valid AccountsT1114 Email Collection
Threat actor: External
Regulator citations: Notified requisite regulatory authorities as required
Initial access: valid_credentials

During the incident: Took steps to secure the account
Engaged third-party specialists to conduct a comprehensive investigation
Conducted a full forensic investigation
Notified relevant individuals
Notified requisite regulatory authorities
Changes made: Reviewed and enhanced its data security policies and procedures related to data security and cybersecurity
Offering of complimentary access to credit monitoring services
Source: Quoted from the filing itself, not independently verified.

Time to disclose: 12 weeks(85 days from discovery to filing)
Compliance flags: — (clock not assessable for this source)

Status: No extraction artifact recorded for this disclosure.

Filing propagation · 3 filings · 3 states

View merged incident ↗

Indiana State AGOct 9 · first

Massachusetts State AGOct 9 · first

New Hampshire State AGOct 9 · first · this page

Evidence ladder

Leak-site claim

Attacker assertion only. Establishes: claim date, group, alleged victim.

Press / market report

Unlocks: incident narrative, operational impact. Still no compliance clock.

State AG / regulator filingThis record

Unlocks: discovery date, data types, affected count, compliance clock.

SEC 8-K / victim statement

Unlocks: materiality, stated response, full audit trail. Ceiling removed.

Source URL: https://mm.nh.gov/files/uploads/doj/remote-docs/mcadam-financial-20251009.pdf
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
Filed at: Oct 9, 2025
Raw hash: 47243c355331ff8fd55b364bf0a652114e81d789330a029a250224d11d99b426

Linked disclosures

Regulatory filings (2) · sorted by filing gap

Reporting entityMcAdam Financial Group

Victim entityMcAdam

Incidentdiscovered Jul 16, 2025

Stated responseTook steps to secure the account

Complianceclock not assessable

Extraction provenanceno artifact recorded

Source provenancemm.nh.gov