Finance

Financial services data breaches expose Social Security numbers, bank and investment account numbers, credit information, transaction histories, and other highly sensitive financial data held by banks, credit unions, investment firms, and lenders. These breaches carry a direct and immediate risk of financial fraud, unauthorized account access, and long-term identity theft, since the exposed data often includes exactly what’s needed to open new lines of credit or drain existing accounts. Financial institutions are also frequent targets of third-party vendor breaches, where a breach at a smaller service provider exposes customer data across multiple banks or investment firms at once. Affected individuals may include current and former account holders, loan applicants, and investment clients, regardless of whether they still have an active relationship with the breached institution. This page tracks confirmed data breaches at banks, investment firms, and other financial services companies, including what data was exposed, which companies notified regulators, and what affected individuals can do next to secure their accounts and understand their legal options.

Hunter Associates Data Breach Exposes Social Security Numbers and Financial Information

Hunter Associates data breach exposing Social Security numbers and financial account information

Hunter Associates, a Pittsburgh-based wealth management firm, suffered a data breach on April 22, 2026, discovered five weeks later on May 29, exposing clients' Social Security numbers and financial account information. Notification letters went out starting June 15, 2026. Affected clients should immediately place a fraud alert or credit freeze with the major credit bureaus […]

Hunter Associates Data Breach Exposes Social Security Numbers and Financial Information Read More »

Finch CPA Firm Data Breach Exposes Sensitive Personal and Financial Information

Finch CPA Firm data breach exposing Social Security numbers and financial information of Texas residents

Finch CPA Firm, a Houston-based accounting firm serving small businesses, notified the Texas Attorney General on June 22, 2026 of a data breach affecting at least 280 Texas residents. Exposed data may include names, addresses, Social Security numbers, dates of birth, and financial or card account information. Affected clients should immediately place a fraud alert

Finch CPA Firm Data Breach Exposes Sensitive Personal and Financial Information Read More »

KH Credit Union Data Breach Exposes Social Security Numbers and Financial Information

KH Credit Union data breach involving Social Security numbers and financial information stored on Kettering Health’s network

KH Credit Union disclosed that member data stored on Kettering Health's network was accessed by an unauthorized party between April 9 and May 20, 2025. Affected members, primarily Kettering Health employees and families, may have had names, Social Security numbers, financial account details, driver's license numbers, and medical billing information exposed. Affected individuals should immediately

KH Credit Union Data Breach Exposes Social Security Numbers and Financial Information Read More »

NACM Intermountain Data Breach 2026: Social Security Numbers and Payment Card Information Potentially Exposed

NACM Intermountain Data Breach

NACM Intermountain reported a data security incident to Massachusetts regulators on June 18, 2026, after discovering that Social Security numbers and credit or debit card numbers may have been exposed. The number of people affected and how the breach occurred have not been publicly disclosed. Anyone notified should immediately place a fraud alert or credit

NACM Intermountain Data Breach 2026: Social Security Numbers and Payment Card Information Potentially Exposed Read More »

Caldwell Sutter Capital Breach Exposes Social Security Numbers and Financial Accounts

Caldwell Sutter Capital data breach exposing Social Security numbers and financial account information affecting 663 individuals after a third-party vendor cybersecurity incident.

Caldwell Sutter Capital, a California investment management firm, disclosed that hackers breached systems at its third-party vendor, FoxTrot LLC, on April 22, 2026, exposing Social Security numbers and financial account information belonging to 663 individuals nationwide. Notifications began May 29, 2026. Affected individuals should immediately place a fraud alert or credit freeze with the major

Caldwell Sutter Capital Breach Exposes Social Security Numbers and Financial Accounts Read More »

Empower Group Data Breach Investigation: More Than 6.6 Million Records Allegedly Exposed

Illustration representing the Empower Group data breach affecting millions of records

The DragonForce ransomware group claims to have stolen roughly 316 GB of data from Empower Group, a New York-based small business financing provider, with an exposed database of over 6.6 million records containing Social Security numbers, names, addresses, phone numbers, emails, and birthdates. Empower Group has not confirmed the breach. Affected individuals should immediately monitor

Empower Group Data Breach Investigation: More Than 6.6 Million Records Allegedly Exposed Read More »

US Tiger Securities Data Breach Investigation: Social Security Numbers and Financial Information Potentially Exposed

US Tiger Securities Data Breach

US Tiger Securities detected suspicious activity on its systems and, after a forensic investigation, confirmed unauthorized access to files containing sensitive customer data, including full names, Social Security numbers, financial account details, government IDs, and dates of birth. Affected individuals received notification letters. Anyone notified should immediately review the letter and enroll in any offered

US Tiger Securities Data Breach Investigation: Social Security Numbers and Financial Information Potentially Exposed Read More »

Cresset Capital Data Breach

Cresset Capital Data Breach

Cresset Capital discovered unauthorized access to its network on April 6, 2026, later confirming intruders viewed sensitive client data including full names, dates of birth, Social Security numbers, driver's license and passport numbers, contact details, and financial account information. Clients whose data was stored with the firm may be affected. Anyone receiving a notification letter

Cresset Capital Data Breach Read More »

American Lending Center Data Breach: 123,158 Individuals Impacted

American Lending Center Data Breach

American Lending Center suffered a ransomware attack discovered July 27, 2025, giving hackers access to files containing full names, dates of birth, and Social Security numbers belonging to 123,158 people nationwide, including 120 Maine residents. Notification letters began going out April 28, 2026. Affected individuals should first enroll in the free IDX identity protection and

American Lending Center Data Breach: 123,158 Individuals Impacted Read More »