Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.
Citizens & Northern Bank notified Vermont regulators that financial account codes and credit and debit account information were exposed in a recent data breach.
Marking Services, Inc. notified the Vermont Attorney General of a data breach involving financial account codes and credit and debit account information, raising concerns about potential fraud for affected consumers.
TIAA notified clients that an unauthorized party acquired personal data including names and Social Security numbers, and the company is now offering two years of credit monitoring.
TIAA Data Breach Exposes Names and Social Security Numbers Read More »
A ransomware group known as Qilin has claimed responsibility for a cyberattack on Genesis Credit Management, a US financial services firm, alleging theft of sensitive consumer data.
Genesis Credit Management Data Breach Exposes Sensitive Financial Records Read More »
Larry C. Kent, C.P.A., a Tucson accounting practice, began notifying clients in October 2026 about a data security incident that may have exposed their personal information.
Larry C. Kent, C.P.A. Data Breach Exposes Client Personal Information Read More »
Libertas Funding, LLC has notified loan applicants and business owners that their names, dates of birth and Social Security numbers were taken by an unauthorized party who accessed its systems in September 2026.
Libertas Funding, LLC Data Breach Exposes Names and Social Security Numbers Read More »
World Acceptance Corporation, a South Carolina consumer lender, has notified customers that names, Social Security numbers and driver’s license numbers may have been accessed in a network breach discovered in August 2026.
The Akira ransomware group claims it stole 88GB of data from accounting firm Krycler, Ervin, Taubman & Kaminsky, including employee passports, Social Security numbers, financial records, and client files.
An unauthorized user accessed an employee email account at accounting firm Platt, Miller & Jacobs, CPAs, LLP, exposing clients’ Social Security numbers, financial account details, and government ID numbers.
DriveWealth notified the California Attorney General of a data breach that may have exposed customer personal and financial account information.
DriveWealth Data Breach Exposes Personal and Financial Account Information Read More »