Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.
A ransomware group known as Storm claims to have targeted The Money Store, a New Jersey mortgage lender, raising concerns that borrowers’ sensitive financial and personal data was accessed.
The Money Store Data Breach Exposes Sensitive Financial and Personal Information Read More »
First Secure Community Bank suffered a ransomware attack attributed to the Storm threat actor group, raising concerns that customer financial and personal information was accessed or stolen.
Argentem Creek Partners, a private credit investment firm, suffered a ransomware attack that exposed extensive internal network data and investor tax document flows tied to its document delivery platform.
Cambridge Mercantile Corp. (U.S.A.) notified customers that an unauthorized third party accessed personal information through a security incident at a third-party marketing platform vendor.
Cambridge Mercantile Corp. (U.S.A.) Data Breach Exposes Names and Contact Details Read More »
Insight Credit Union was targeted in a ransomware attack attributed to the Storm threat group, raising concerns that member financial and personal information may have been accessed without authorization.
Insight Credit Union Data Breach Exposes Member Financial and Personal Records Read More »
A ransomware group known as Storm has claimed responsibility for a data breach at Johnson Investment Counsel, a Cincinnati-based wealth management firm managing about $23 billion in client assets.
Johnson Investment Counsel Data Breach Exposes Client Financial Records Read More »
The State Bank Group, a community bank operating multiple branches in McHenry County, Illinois, suffered a ransomware attack attributed to the Storm threat group, raising concerns about exposed customer financial data.
The State Bank Group Data Breach Exposes Customer Banking and Financial Information Read More »
Boston Capital Holdings LP notified regulators that a data breach exposed Social Security numbers, prompting concerns about identity theft for affected individuals.
Boston Capital Holdings LP Data Breach Exposes Social Security Numbers Read More »
Lincoln Investment Planning, LLC notified regulators of a data breach that exposed Social Security numbers, financial account details, government ID numbers, and health records belonging to affected individuals.
Blossomland Accounting LLC suffered a ransomware attack in which the Akira group claims to have stolen 12GB of corporate data, including employee Social Security numbers, passports, financial records, and client files.