Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.
LPL Financial LLC notified regulators of a data breach that exposed Social Security numbers, financial account codes, and credit and debit account information belonging to affected individuals.
Dorfman Abrams Music, P.C, a certified public accounting firm, suffered a ransomware attack claimed by the genesis threat actor group, raising concerns that client financial and personal records were accessed.
Dorfman Abrams Music, P.C Data Breach Exposes Client Financial and Personal Records Read More »
Bernath & Rosenberg, a full-service CPA firm, suffered a ransomware attack attributed to the Genesis threat actor group, raising concerns that client tax and financial records were accessed.
Bernath & Rosenberg Data Breach Exposes Client Financial and Tax Records Read More »
A former vendor of Suffolk Federal Credit Union suffered unauthorized computer access that exposed personal information belonging to credit union members, prompting formal notification letters and a free credit monitoring offer.
Suffolk Federal Credit Union Data Breach Exposes Personal and Financial Information Read More »
Sales Boomerang, a mortgage industry software provider, suffered a ransomware attack linked to the direwolf threat group, raising concerns about exposed customer and financial data.
Sales Boomerang Data Breach Exposes Customer and Business Financial Information Read More »
Score Services LLC, doing business as Score Capital, notified the Vermont Attorney General of a data breach that exposed Social Security numbers, financial account codes, and credit and debit card information.
Score Capital Data Breach Exposes Social Security Numbers and Financial Account Data Read More »
Lennar Mortgage, LLC has notified regulators of a data breach that may have exposed customers’ sensitive personal and financial information, prompting warnings about identity theft risk.
Forrestall CPAs LLC has notified individuals that an unauthorized party accessed and viewed files on its network in December 2025, exposing personal information tied to the accounting firm’s clients.
Forrestall CPAs LLC Data Breach Exposes Personal and Financial Information Read More »
HILT-Trust 2020-A notified the Vermont Attorney General that Social Security numbers were exposed in a data breach, putting affected individuals at risk of identity theft.
HILT-Trust 2020-A Data Breach Exposes Social Security Numbers Read More »
U.S. Bank notified regulators that a data breach compromised Social Security numbers, financial account codes, and credit and debit account information belonging to affected customers.
U.S. Bank Data Breach Exposes Social Security Numbers and Financial Account Information Read More »