Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.
Sunwest Bank has notified regulators that a data breach exposed customers’ Social Security numbers, raising concerns about identity theft and fraud risk.
Sunwest Bank Data Breach Exposes Social Security Numbers Read More »
An unauthorized actor broke into the personal iCloud account of financial advisor J. Michael May and used stored credentials to view a client’s name and financial account number.
J. Michael May Data Breach Exposes Names and Financial Account Numbers Read More »
TD Bank U.S. notified regulators of a data breach that exposed customers’ Social Security numbers, government ID numbers, and financial account information.
Kovack Financial, LLC has notified clients that an unauthorized actor accessed files containing personal information on its network for several weeks in August 2025, with the breach only confirmed in mid-2026.
Kovack Financial Data Breach Exposes Client Personal Information Read More »
Frost Bank notified the Vermont Attorney General that a data breach exposed customers’ Social Security numbers, financial account codes, and credit and debit account information.
Frost Bank Data Breach Exposes Social Security Numbers and Financial Account Information Read More »
KerberRose S.C. notified the Vermont Attorney General of a data breach that exposed Social Security numbers, financial account codes, and credit and debit account information.
D.B. Root & Company, LLC notified the Vermont Attorney General of a data breach that exposed Social Security numbers, raising identity theft risks for affected individuals.
D.B. Root & Company Data Breach Exposes Social Security Numbers Read More »
AssetMark, Inc. notified the Vermont Attorney General of a data breach that exposed Social Security numbers and government ID numbers belonging to affected individuals.
AssetMark, Inc. Data Breach Exposes Social Security Numbers and Government ID Numbers Read More »
Sawyer Savings Bank, a community bank in Saugerties, New York, was targeted by the Storm ransomware group in an attack that may have compromised sensitive customer financial information.
Sawyer Savings Bank Data Breach Exposes Customer Financial Information Read More »
Orrstown Bank notified regulators that a data breach exposed customers’ Social Security numbers, government ID numbers, and financial account information.
Orrstown Bank Data Breach Exposes Social Security Numbers and Financial Account Data Read More »