On May 8, 2026, AssetMark Trust Company filed an official data breach notice with the Texas Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Texas Attorney General filing confirms the breach notice — not a court case. Dollar amounts and deadlines are shown only when a verifiable court filing supports them — nothing on this page estimates or guarantees a result.
Records filed with the Texas AG show that AssetMark Trust Company confirmed exposure of the information below:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
AssetMark Trust Company operates as a premier financial and wealth management institution, providing comprehensive custodial, trust, and investment administration services to independent financial advisors and their high-net-worth clients. Because of its core operations, the firm routinely handles vast quantities of sensitive financial records, investment portfolios, trust documents, and personally identifiable information (PII). To execute wealth transfers, manage accounts, and comply with federal reporting mandates, AssetMark maintains deep repositories of high-value consumer data, making its digital infrastructure a lucrative target for cybercriminals seeking financial gain through illicit access.
In 2026, AssetMark Trust Company reported a significant data security incident to the Texas Attorney General, signaling a critical breach of its network defenses. While the precise mechanics of the intrusion continue to be evaluated through ongoing forensic investigations, security events of this magnitude within the financial sector typically involve sophisticated cyber threats such as unauthorized database access, third-party vendor compromises, or malicious deployment of ransomware. Financial institutions are prime targets for Advanced Persistent Threats (APTs) aiming to bypass perimeter security, infiltrate legacy databases, or exploit vulnerabilities in client-facing web portals and administrative backends.
The exposure resulting from this incident encompasses a dangerous array of sensitive information, including full names, Social Security numbers, dates of birth, financial account numbers, routing details, and detailed transaction histories. The compromise of these specific data categories exposes victims to severe, long-term risks. Cybercriminals armed with Social Security numbers and financial account details can execute unauthorized account takeovers, initiate fraudulent wire transfers, open fraudulent lines of credit, and launch complex tax refund schemes. Unlike easily replaceable credit card numbers, foundational identifiers like Social Security numbers remain permanently compromised, leaving victims vulnerable to recurring identity theft for years to come.
As a financial institution operating in Texas and managing sensitive consumer assets, AssetMark Trust Company was bound by rigorous legal and regulatory frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and applicable state data protection statutes. These laws mandate strict administrative, technical, and physical safeguards to protect nonpublic personal information against unauthorized disclosure. The occurrence of a widespread data breach strongly suggests potential failures in maintaining adequate encryption standards, monitoring network traffic, or vetting third-party access points, thereby breaching the statutory duty of care owed to account holders and beneficiaries.
Receiving a formal data breach notification letter from AssetMark Trust Company serves as an official acknowledgment that your private financial and personal records were compromised due to corporate negligence. Legally, this notice establishes standing to participate in a class action lawsuit aimed at holding the company accountable for failing to secure your data. Victims do not need to demonstrate actual financial loss or identity theft to pursue legal remedies; the mere exposure of private data due to inadequate security is actionable. Our firm evaluates these cases on a contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
Notification Delay: Approximately 2 months elapsed between the reported date of the security incident and the company's notification to the Attorney General. Courts have found that excessive notification delays independently support legal claims.
Many people wrongly assume a claim requires proven fraud. The law recognizes data exposure alone as harm. See which of these describes your situation:
You received a data breach notification letter from AssetMark Trust Company
You were a customer, patient, employee, or client of AssetMark Trust Company
Your personal information was stored in AssetMark Trust Company's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the AssetMark Trust Company letter. It documents your standing as an affected individual — the foundation of any claim you file.
AssetMark Trust Company typically offers free credit monitoring to affected individuals. The enrollment code is usually in the letter — activate it even if you see no signs of fraud.
Contact the three credit bureaus and request free credit freezes. This stops identity thieves from opening accounts in your name while leaving your existing accounts untouched.
Deadlines apply to breach claims. A free review of your AssetMark Trust Company letter takes minutes, and we only get paid if you do.
Security Incident
2026-03-17
AssetMark Trust Company's systems were compromised, exposing stored personal records.
Reported to Attorney General
May 8, 2026
The Texas AG received AssetMark Trust Company's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to AssetMark Trust Company letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Texas's Identity Theft Enforcement and Protection Act (Tex. Bus. & Com. Code § 521) requires notification within 60 days and imposes civil penalties up to $500,000 for violations. Texas residents may pursue civil action for data security failures.
The companies below also filed breach notices with the Texas Attorney General. Letter recipients for any of them can pursue a review.
Mercadien PC Certified Public Accountants
Texas · Oct 2026
Arkansas Hospice Inc. dba LifeTouch Health
Texas · Oct 2026
EnTrans Holding, Inc.
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
Blueberry Pediatrics
Texas · Oct 2026
CenterPoint Energy, Inc.
Texas · Oct 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris