Gilman Hill Asset Management, LLC Data Breach — Class Action Review

Gilman Hill Asset Management, LLC operates as a private wealth management and investment advisory firm, entrusted with the significant financial assets, estate plans, and private wealth portfolios of high-net-worth individuals, families, and institutional clients. Because of the nature of its operations, the firm routinely collects, processes, and stores vast quantities of highly sensitive personal and financial data necessary for executing portfolio management, tax planning, financial reporting, and comprehensive wealth advisory services. This high-value repository of financial intelligence makes the company an attractive and lucrative target for cybercriminals seeking to exploit confidential wealth information for monetary gain.

In 2025, Gilman Hill Asset Management, LLC officially reported a serious data security incident to the New Hampshire Attorney General's office. While the precise mechanics of the breach are still under active investigation, security incidents affecting wealth management and financial institutions typically involve sophisticated cyberattacks such as unauthorized intrusion into internal network databases, credential stuffing, or third-party vendor compromises. These attacks are frequently designed to bypass perimeter defenses, allowing malicious actors to quietly infiltrate systems, dwell undetected within the network architecture, and exfiltrate confidential files containing sensitive client information.

The breach exposed a devastating array of sensitive information, including clients' full legal names, dates of birth, Social Security numbers, banking and investment account numbers, routing details, tax identification numbers, and detailed financial transaction histories. Each of these exposed data categories carries severe, concrete risks for affected individuals. Unauthorized exposure of Social Security numbers and dates of birth provides cybercriminals with the foundational tools required to execute sophisticated identity theft and open fraudulent credit lines. Furthermore, the exposure of specific financial account numbers, routing information, and portfolio holdings creates an immediate and alarming risk of direct financial account takeover, unauthorized wire transfers, and targeted financial fraud.

As a financial advisory institution handling nonpublic personal information, Gilman Hill Asset Management, LLC was bound by stringent federal and state legal frameworks, most notably the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule, alongside state data protection regulations. These laws mandate that financial institutions implement rigorous administrative, technical, and physical safeguards to protect sensitive client data from unauthorized access, disclosure, or misuse. The occurrence of a data breach of this magnitude strongly indicates a failure to maintain these required security standards, pointing to potential vulnerabilities in data encryption, network monitoring, multi-factor authentication, or vendor risk management.

For clients and investors who have received an official data breach notification letter from Gilman Hill Asset Management, LLC, the letter serves as a formal legal acknowledgment that your confidential information was compromised due to the firm's security failures. Legally, the receipt of this notice establishes the necessary foundation and legal standing to participate in a class action lawsuit seeking accountability, compensation for mitigation efforts, and enhanced credit monitoring protections. Crucially, victims of data breaches do not need to prove that actual financial theft or fraud has already occurred to seek legal recourse. Our law firm handles these complex data privacy cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.