What Happened in the Kovack Financial Data Breach?
Kovack Financial, LLC has told clients that someone outside the company got into files stored on its computer network. The parent firm oversees broker-dealer Kovack Securities and registered investment adviser Kovack Advisors. As a result, the incident touches records tied to both arms of the business.
According to the company’s own account, staff first noticed unusual network activity in late August 2025. Kovack Financial says the unauthorized access to its files actually took place across several weeks in August 2025. Once the activity was spotted, the firm says it moved to lock down its systems and start a formal review.
That review did not move quickly. Kovack Financial has stated that it took nearly a year, until July 2026, to confirm which files were touched and whose personal information they contained. This kind of drawn-out forensic timeline is common at firms holding large volumes of client records across multiple related entities. Once the company pinpointed the affected files, it began sending written notices to the people involved.
Who was affected?
The people affected are clients of Kovack Financial and its affiliated firms, Kovack Securities and Kovack Advisors. Because these entities serve brokerage customers and investment advisory clients, the exposed group likely includes individuals with active or past financial accounts at the company.
Kovack Financial has not released a specific number of affected individuals in its public notice. Therefore, the full scope of this incident remains unclear to the public. What is known is that the notice went to people whose files were confirmed, after review, to contain personal data.
What Information Was Potentially Exposed?
Kovack Financial’s notification does not spell out, item by item, which types of data were involved for each person. However, the company has confirmed that files containing personal information were accessed during the incident. Because the firm handles brokerage and advisory accounts, the kinds of information typically held in these files can include:
- Full names
- Account-related financial information
- Other personal identifiers tied to client relationships
- Information collected as part of regulatory recordkeeping
Even without a full public breakdown of data types, the exposure of financial account details carries real risk. Fraudsters can use partial financial data, combined with other leaked information, to attempt account takeovers or convincing phishing schemes. In addition, any exposed identifiers can be pieced together with data from other breaches to build a fuller profile of a victim.
Long-tenured financial firms often retain records spanning months or years of a client relationship. This means a single intrusion can expose a wide history of account activity rather than a single snapshot. As a result, affected individuals may face a longer window of risk that extends well beyond the initial notification.
What is the company doing?
Once it noticed the suspicious activity, Kovack Financial says it worked to secure its network and stop further unauthorized access. The firm then launched an investigation to figure out exactly what happened and which records were involved. This process included reviewing accessed files individually to match content to specific clients.
After completing that review, Kovack Financial began notifying affected individuals by letter. The company also filed notice with the California Attorney General’s Office, as required under state law. In addition, Kovack Financial is offering twelve months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company, to those who received a notice.
What Should Affected Individuals Do?
Enroll in Credit Monitoring Right Away
If you received a letter from Kovack Financial, sign up for the free credit monitoring and identity restoration service as soon as possible. These services can flag new account openings or suspicious credit inquiries before they cause major damage.
Because enrollment periods are often time-limited, don’t wait to act. Missing a deadline could mean losing access to a protection that costs nothing to use right now.
Watch Your Financial Accounts Closely
Review your bank and investment account statements regularly for the next 12 to 24 months. Look for withdrawals, transfers, or account changes that you did not authorize.
In addition, pay attention to any unexpected communications referencing your financial accounts. Scammers sometimes use stolen information to craft convincing messages that appear to come from a legitimate financial institution.
Consider a Fraud Alert or Credit Freeze
Because financial information may have been involved, placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion adds another layer of protection. A freeze makes it harder for anyone to open new credit in your name.
You can request a free credit report from each bureau at annualcreditreport.com to check for accounts you don’t recognize. If you spot anything unusual, report it to the bureau immediately and consider escalating to law enforcement.
Stay Alert for Phishing Attempts
After a breach like this, phishing emails and calls that reference the incident often follow. Be cautious of any message asking you to click a link, confirm account details, or provide payment information.
Instead of clicking links in unsolicited messages, go directly to the official website or call a verified phone number. This simple habit can prevent a second wave of harm following the original breach.
Know Your Legal Options
If you received a notice about this incident, you may have grounds to pursue legal action against Kovack Financial. Companies that store sensitive client data are generally expected to maintain reasonable safeguards against unauthorized access.
Consulting a data breach attorney for a free case evaluation can help you understand whether you qualify for compensation. An attorney can also explain deadlines that may apply to your specific situation.
More Information
Official data breach notification from California Attorney General