On May 14, 2026, Cresset Capital Management, a prominent wealth management firm, reported a data security incident to the Vermont Attorney General. This report indicates that sensitive personal and financial data entrusted to the company may have been compromised through unauthorized access to its digital systems.
While the specific details of how this breach occurred remain undisclosed, incidents at financial institutions often involve sophisticated cyberattacks. These can include unauthorized access to internal databases, compromises of cloud-stored client portfolios, or exploitation of vulnerabilities within third-party vendor systems. Such attacks often aim to bypass robust security measures.
The information reported exposed in this incident includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Direct Deposit Account Details, and Investment Portfolio Information. The exposure of such comprehensive financial and personal profiles puts affected individuals at significant risk of targeted financial fraud, identity theft, and other malicious activities.
As a financial institution, Cresset Capital Management is subject to strict regulations like the Gramm-Leach-Bliley Act (GLBA) and the FTC's Safeguards Rule, which mandate robust security for client data. A data breach suggests that the firm's security protocols may have fallen short of these elevated legal and industry standards.
If you received a data breach notification letter from Cresset Capital Management, this officially confirms your data was part of the incident. You do not need to show actual financial loss to seek legal remedies for the increased risk and privacy violation.
Our firm is currently monitoring the Cresset Capital Management data breach investigation. We offer a free, no-obligation case review to help you understand your rights and determine if you may be eligible to pursue a claim. We work on a contingency fee basis, meaning there are no upfront costs, and we only get paid if we successfully recover compensation for you.