LPL Financial LLC notified the Vermont Attorney General in September 2026 that hackers accessed customer data including Social Security numbers, financial account codes, and credit and debit account information. The number of affected individuals has not been publicly disclosed. Anyone who holds or held an LPL Financial account should place a credit freeze and monitor their credit reports immediately.
| Company | LPL Financial LLC |
|---|---|
| Industry | Finance |
| Data Types Exposed | Social Security Numbers, Financial Account Codes, Credit and Debit Account Information |
| People Affected | Not Publicly Disclosed |
| Attack Method | Unspecified/Unauthorized Access |
| Regulators Notified | Vermont Attorney General |
Were you affected by this breach?
You may be owed compensation.
Data breach victims can recover money for identity-theft losses, out-of-pocket costs, wasted time, and the ongoing risk of fraud — usually with no upfront cost, and no fee unless you win.
Check if you qualify — free reviewWhat Happened in the LPL Financial Data Breach?
LPL Financial LLC, a firm that supports financial advisors and manages brokerage accounts, has disclosed a data breach affecting sensitive customer information. The company filed a formal notification with the Vermont Attorney General in September 2026. This filing confirms that unauthorized individuals gained access to personal and financial data tied to LPL Financial customers.
The exact discovery date has not been publicly disclosed. However, the notification itself, submitted in September 2026, marks the point at which LPL Financial alerted state regulators. As a result, affected individuals are now learning that their information may have been compromised. The precise method used by the attacker has also not been detailed in public filings so far.
Following discovery of the incident, LPL Financial reportedly began an internal review to determine the scope of the exposure. This process typically involves forensic specialists who trace how the intrusion occurred and which systems were touched. Because LPL Financial handles brokerage and investment accounts, the review likely included a close look at account management systems and any third parties connected to them. In addition, the company appears to have coordinated with legal counsel before notifying regulators and consumers.
Who was affected?
The individuals affected by this breach are believed to be customers or clients connected to LPL Financial’s brokerage and advisory services. Because LPL Financial works with independent financial advisors across the country, the impact could extend to account holders in multiple states. The exact number of affected individuals has not been publicly disclosed.
It remains unclear whether employees, in addition to customers, were affected by this breach. Since the exposed data includes financial account codes and credit and debit account information, the incident likely centers on customer-facing financial systems. This means individuals who held brokerage or investment accounts through LPL Financial should pay close attention to official notifications they receive.
What Information Was Potentially Exposed?
According to the breach notification filed with Vermont regulators, several categories of sensitive personal and financial data were involved in this incident. This information is exactly the type that identity thieves and fraudsters seek out. Below is a summary of the data types confirmed in the filing.
- Social Security Numbers
- Financial Account Codes
- Credit and Debit Account Information
The exposure of Social Security numbers is particularly concerning because this number acts as a master key to a person’s financial identity. With a Social Security number, criminals can open new credit accounts, file fraudulent tax returns, or apply for loans in someone else’s name. Because this type of fraud can take months to detect, the risk to affected individuals may persist well beyond the initial notification.
Similarly, exposed financial account codes and credit or debit account information raise the risk of direct account fraud. Criminals could use this data to attempt unauthorized transactions or to impersonate account holders when contacting financial institutions. For example, a scammer might use exposed details to pass identity checks at a bank or brokerage. This combination of identity and financial data makes the breach more serious than one involving a single data category alone.
What is the company doing?
In response to the breach, LPL Financial filed a formal notification with state regulators, a required step whenever residents’ personal information is compromised. This filing signals that the company has acknowledged the incident and is working through its legal obligations. LPL Financial also filed notice with the Vermont Attorney General, as required under state breach notification law.
Beyond the regulatory filing, companies in this position typically notify affected individuals directly by mail or email. They often provide instructions on protective steps consumers should take. In many cases, firms also offer complimentary credit monitoring or identity protection services to individuals whose Social Security numbers were exposed. Details on any such offer from LPL Financial specific to this incident have not been made public at this time.
What Should Affected Individuals Do?
Monitor Your Credit Reports Closely
Affected individuals should request copies of their credit reports from all three major credit bureaus. Because Social Security numbers were involved in this breach, new fraudulent accounts could appear without immediate notice. Regularly reviewing your reports helps you catch suspicious activity early.
You can access free credit reports through AnnualCreditReport.com. In addition, many banks and credit card companies now offer free credit monitoring tools. Checking these reports every few months, rather than just once, gives you a better chance of spotting fraud before it grows.
Consider a Credit Freeze or Fraud Alert
Because this breach exposed Social Security numbers alongside financial account details, placing a credit freeze is a strong protective step. A freeze prevents new creditors from accessing your credit file, which stops most attempts to open accounts in your name. This action is free and can be lifted temporarily whenever you need to apply for credit yourself.
Alternatively, a fraud alert requires creditors to verify your identity before extending new credit. This option is less restrictive than a freeze but still adds a layer of protection. You can place either a freeze or an alert by contacting Equifax, Experian, and TransUnion directly.
Watch for Phishing and Suspicious Contact
After a breach involving financial information, scammers often follow up with phishing emails or phone calls. These messages may impersonate LPL Financial, a bank, or even a government agency. Because the attackers may already have some of your real information, these scams can seem convincing.
Therefore, avoid clicking links or providing information in response to unexpected messages. Instead, contact LPL Financial or your financial institution directly using verified phone numbers. This simple habit can prevent a data breach from turning into a direct financial loss.
Review Financial Account Statements Regularly
Since credit and debit account information was included in this breach, reviewing your account statements is essential. Look for any transactions you do not recognize, even small ones. Fraudsters sometimes test stolen account information with tiny charges before attempting larger transactions.
If you notice anything unusual, report it to your bank or card issuer immediately. Most institutions have specific fraud departments that can freeze a card or reverse unauthorized charges quickly. Acting fast typically limits your financial liability under consumer protection laws.
Consult a Data Breach Attorney
Given the sensitivity of the data involved, affected individuals may want to speak with an attorney who focuses on data breach cases. An attorney can help you understand whether you qualify for compensation through a class action or individual claim. Many offer free consultations, so there is little downside to asking questions.
Because deadlines for filing claims can vary by state and by case, it helps to act sooner rather than later. A knowledgeable attorney can also explain what documentation you should keep, such as notification letters and evidence of any resulting fraud. This preparation can strengthen your position if a claim moves forward.
Get a Free Case Review
Tell us how this breach affected you. A data breach attorney will review your situation at no cost and with no obligation — it takes about two minutes.
More Information
View the public data breach notification listing from Vermont Attorney General