The Maine Office of the Attorney General disclosed a data breach affecting **Kovack Financial** in July 2024. The incident occurred between **August 15, 2023, and September 5, 2023**, when an **unauthorized party gained access to employee email accounts** through an **external system breach (hacking)**. The attack compromised the personal information of **43,324 individuals**, though the exact type of exposed data (e.g., financial records, personally identifiable information, or internal communications) was not specified in the report. The breach was attributed to a **cyber intrusion**, suggesting potential exploitation of vulnerabilities in email security protocols or phishing tactics. While the full scope of the damage remains undisclosed, the scale of affected individuals indicates a **significant exposure risk**, particularly if sensitive client or employee data was accessed. The delayed detection (nearly a year later) further highlights gaps in real-time monitoring or incident response. No ransomware involvement was reported, but the breach underscores the growing threat of **targeted hacking campaigns** against financial services firms, where email systems often serve as a primary attack vector for data exfiltration.
TPRM report: https://www.rankiteo.com/company/kovack-financial-network
"id": "kov013091825",
"linkid": "kovack-financial-network",
"type": "Cyber Attack",
"date": "8/2023",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': 43324,
'industry': 'Finance/Insurance',
'name': 'Kovack Financial',
'type': 'Financial Services'}],
'attack_vector': 'External System Breach (Hacking)',
'data_breach': {'number_of_records_exposed': 43324,
'type_of_data_compromised': ['Email Account Data']},
'date_publicly_disclosed': '2024-07-09',
'description': 'The Maine Office of the Attorney General reported a data '
'breach involving Kovack Financial, where an unauthorized '
'party accessed email accounts between August 15, 2023, and '
'September 5, 2023. A total of 43,324 individuals were '
'affected by this external system breach (hacking).',
'impact': {'data_compromised': True, 'systems_affected': ['Email Accounts']},
'references': [{'date_accessed': '2024-07-09',
'source': 'Maine Office of the Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': ['Maine Office of the '
'Attorney General']},
'title': 'Kovack Financial Data Breach (2023)',
'type': 'Data Breach'}