Cresset Capital Management, a firm specializing in wealth management, formally reported a data security incident to the California Attorney General on May 14, 2026. The breach, which occurred on April 6, 2026, involved unauthorized access to sensitive client data. While the specific nature of the breach remains unspecified, such incidents can lead to significant concerns for affected individuals.
The compromised information includes highly sensitive personal and financial details. The exposed data types are Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Investment and Portfolio History. With this array of data, malicious actors could attempt identity theft, financial fraud, or unauthorized access to your accounts.
Financial institutions like Cresset Capital Management are entrusted with safeguarding client data and are subject to stringent regulations, including the Gramm-Leach-Bliley Act and California's data protection laws. These regulations require firms to implement robust security measures to protect nonpublic personal information. A breach of this magnitude suggests potential shortcomings in these security protocols.
If you received a data breach notification letter from Cresset Capital Management, it confirms that your personal and financial information was exposed due to this security failure. You do not need to prove that you have already suffered financial harm; the increased risk of future identity theft and the violation of your privacy are recognized legal injuries.
Understanding your rights and potential legal avenues is crucial. Our firm is actively monitoring the Cresset Capital Management data breach and offers free case reviews to help affected individuals understand their options. We handle these cases on a contingency fee basis, meaning you pay no out-of-pocket legal fees, and we only get paid if we successfully recover compensation for you.