Concorde Investment Services disclosed a data security incident to the Maryland Attorney General on February 25, 2025, triggering legally mandated notification letters. If you are one of the people who received Concorde Investment Services's letter, your data may have been exposed and you could be entitled to compensation.
The Maryland Attorney General filing confirms the breach notice — not a court case. This tracker shows settlement figures and deadlines solely where a public court record exists. Outcomes are never estimated or promised.
Per the Maryland Attorney General filing, the Concorde Investment Services incident compromised these categories of personal information:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Concorde Investment Services operates within the wealth management and financial services sector, providing comprehensive brokerage, investment advisory, and retirement planning solutions to individual and institutional clients. Because of the critical financial nature of its business, the firm routinely collects, processes, and stores an extensive volume of highly sensitive personal and financial data. This includes detailed investment portfolios, transactional records, tax identification documents, and core banking details necessary to execute trades and manage wealth portfolios. Consequently, Concorde Investment Services functions as a high-value repository for cybercriminals seeking to exploit personally identifiable information for financial gain.
In 2025, Concorde Investment Services reported a significant data security incident to the Maryland Attorney General, prompting widespread concern among investors and account holders. While organizations in the financial sector deploy robust cybersecurity measures, data breaches typically stem from sophisticated cyberattacks such as unauthorized access to legacy databases, credential stuffing campaigns, third-party vendor compromises, or targeted malware and ransomware deployments. In financial industry breaches, attackers often exploit vulnerabilities in network perimeters or endpoint security to gain persistent access to internal systems, compromising sensitive infrastructure before detection occurs.
An incident of this magnitude exposes a devastating array of sensitive data categories, each carrying severe, long-term risks for affected individuals. The compromise of full names, dates of birth, and Social Security numbers provides malicious actors with the foundational building blocks required to commit full-scale identity theft and open fraudulent lines of credit. Furthermore, the potential exposure of financial account numbers, routing details, and investment portfolio histories creates an immediate danger of unauthorized wire transfers, asset liquidation, and direct account takeover. When wealth management data is compromised, victims face profound difficulties in securing their financial assets, restoring their credit profiles, and monitoring accounts against ongoing fraudulent activities.
As a registered financial institution, Concorde Investment Services was bound by strict legal and regulatory obligations to safeguard the sensitive consumer data entrusted to its care. Under the Gramm-Leach-Bliley Act (GLBA) and applicable Maryland state data protection laws, financial institutions are legally mandated to implement comprehensive administrative, technical, and physical safeguards to protect customer information from unauthorized disclosure. The occurrence of a data breach compromising sensitive financial dossiers strongly suggests potential failures in maintaining adequate network security, failing to promptly patch known vulnerabilities, or neglecting rigorous third-party vendor oversight. These statutory duties are designed to prevent precisely this type of catastrophic exposure.
Receiving a formal data breach notification letter from Concorde Investment Services serves as a legal acknowledgement that your confidential financial and personal records were compromised due to corporate security failures. Legally, this notification establishes the necessary standing for affected individuals to participate in class action litigation aimed at holding the company accountable for its negligence. You do not need to wait until you experience actual financial loss or identity theft to take legal action; the increased risk of future harm alone justifies your claim. Our firm handles these complex class action cases on a strict contingency fee basis, meaning you pay nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.
You do not need to show financial loss to be eligible. Courts have treated exposure of personal data as real harm. You likely qualify if any of the statements below describe you:
You received a data breach notification letter from Concorde Investment Services
You were a customer, patient, employee, or client of Concorde Investment Services
Your personal information was stored in Concorde Investment Services's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Keep the Concorde Investment Services letter. It is the document that proves you were part of this breach; a claim without it is weaker. Store a scanned backup.
Activate the complimentary credit monitoring referenced in Concorde Investment Services's letter — early fraud detection and a documented harm record both help your claim.
Freeze your credit with Equifax, Experian and TransUnion. A freeze blocks new accounts from being opened in your name and can be lifted whenever you need to apply for credit.
Time limits can forfeit your claim. Have attorneys review your Concorde Investment Services case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in Concorde Investment Services's systems.
Reported to Attorney General
February 25, 2025
The Maryland AG received Concorde Investment Services's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Affected individuals receive mailed notification letters as required by statute.
Legal Window — Act Now
Statute of limitations applies
A statute-of-limitations clock is running on this type of claim.
Breach victims may recover several categories of loss. What applies in the Concorde Investment Services matter depends on your state, the data involved, and the company's conduct.
States like Maryland may allow statutory damages per incident regardless of actual harm — California sets $100–$750 as the benchmark.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
The time you lost to credit freezes, fraud disputes, and account monitoring counts as a recoverable inconvenience.
Credit-monitoring subscriptions and protection plans you bought because of the breach are recoverable expenses.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
Other companies have notified the Maryland AG of breaches. Received one of these letters as well? You may have more than one claim.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris