State records show Marble Harbor Investment Counsel, LLC notified the New Hampshire Attorney General of a data breach on May 21, 2026. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The New Hampshire Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official New Hampshire AG notice for Marble Harbor Investment Counsel, LLC identifies the following exposed data:
The more sensitive the data involved, the stronger the potential claim. Disclosure of these categories is legally recognized harm.
Marble Harbor Investment Counsel, LLC operates within the wealth management and financial advisory sector, providing personalized investment strategies, portfolio management, and financial planning services to high-net-worth individuals, families, and institutional clients. Because of the sophisticated nature of wealth management, the firm routinely collects, processes, and stores an extensive volume of highly sensitive personal and financial documentation. To effectively manage client portfolios, execute transactions, and provide comprehensive tax and estate planning alignment, Marble Harbor requires access to detailed financial histories, tax identification numbers, banking coordinates, and personal identity records. This deep repository of confidential information makes the firm and its digital infrastructure a prime target for malicious actors seeking to exploit valuable financial assets and personal identities.
The data security incident reported by Marble Harbor Investment Counsel, LLC to the New Hampshire Attorney General in 2026 highlights the persistent vulnerabilities facing financial institutions and investment firms. While exact technical forensics continue to emerge, incidents of this nature typically involve sophisticated cyberattacks, unauthorized network infiltration, or third-party vendor compromises that penetrate corporate defenses. In the financial sector, threat actors frequently deploy ransomware, credential-stuffing attacks, or advanced persistent threats to bypass perimeter security controls, allowing unauthorized parties to dwell within internal networks, exfiltrate confidential databases, and compromise critical administrative systems before detection occurs.
The unauthorized exposure of information entrusted to a wealth management firm carries profound and long-lasting risks for affected clients. Because of Marble Harbor's core business functions, the compromised data pools likely include full legal names, Social Security numbers, dates of birth, financial account numbers, investment portfolio valuations, and detailed tax return information. The exposure of Social Security numbers combined with financial account details and tax records creates an immediate danger of sophisticated financial fraud, unauthorized wire transfers, account takeover, and synthetic identity theft. When cybercriminals obtain this granular financial profile, victims face years of heightened exposure to fraudulent credit applications, tax refund theft, and targeted spear-phishing campaigns designed to drain retirement accounts and investment holdings.
As a registered investment advisor and financial institution, Marble Harbor Investment Counsel, LLC is subject to stringent federal and state regulatory frameworks, including the Gramm-Leach-Bliley Act (GLBA) and the Safeguards Rule enforced by the Federal Trade Commission. These statutory obligations mandate that financial institutions implement robust administrative, technical, and physical safeguards to ensure the security and confidentiality of non-public personal information. The occurrence of a significant data breach strongly suggests a failure to adequately maintain these mandated security protocols, such as failing to enforce multi-factor authentication, neglecting timely software patch management, or inadequately monitoring network traffic for anomalous behavior. Under applicable law, companies that collect sensitive financial data bear a non-delegable duty to protect it from unauthorized disclosure.
Receiving an official data breach notification letter from Marble Harbor Investment Counsel, LLC serves as formal acknowledgment that your private financial information was compromised due to inadequate security measures. Legally, this notification establishes the necessary standing to participate in a class action lawsuit aimed at holding the firm accountable for failing to safeguard sensitive data. Victims of financial sector data breaches do not need to demonstrate actual financial loss or identity theft to pursue legal remedies; the increased risk of future harm and the costs associated with mitigating that risk are sufficient grounds for action. Our law firm investigates these matters on a strict contingency fee basis, meaning affected individuals pay nothing out of pocket, and we recover fees only if a successful recovery is achieved on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Marble Harbor Investment Counsel, LLC
You were a customer, patient, employee, or client of Marble Harbor Investment Counsel, LLC
Your personal information was stored in Marble Harbor Investment Counsel, LLC's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Your Marble Harbor Investment Counsel, LLC notification letter is legal evidence. Keep both physical and digital copies somewhere safe — it establishes you were affected and anchors your claim.
Check your Marble Harbor Investment Counsel, LLC letter for credit-monitoring enrollment instructions and use them. Free monitoring catches fraud early and documents harm.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Claims windows close. Our team reviews Marble Harbor Investment Counsel, LLC breach cases free of charge and works on contingency — you pay nothing unless we recover for you.
Security Incident
Prior to AG notification
An unauthorized party accessed Marble Harbor Investment Counsel, LLC systems that stored personal information.
Reported to Attorney General
May 21, 2026
The New Hampshire AG received Marble Harbor Investment Counsel, LLC's formal data breach disclosure.
Consumer Notification Letters Sent
Within weeks of AG filing
Notification letters are sent by mail to all individuals whose data was involved.
Legal Window — Act Now
Statute of limitations applies
Claim deadlines apply — waiting can forfeit your right to compensation.
Several forms of recovery may be available to Marble Harbor Investment Counsel, LLC letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Time spent handling breach fallout — freezes, disputes, monitoring — is compensable.
If you paid for credit monitoring or identity protection after the breach, those costs can be recovered.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
New Hampshire's breach notification law (RSA 359-C) requires timely notice to affected individuals and the Attorney General. New Hampshire residents may pursue civil action for actual damages and attorney's fees stemming from inadequate data protection.
The companies below also filed breach notices with the New Hampshire Attorney General. Letter recipients for any of them can pursue a review.
One Medical
New Hampshire · Jul 2026
Town of Canterbury, NH
New Hampshire · Jun 2026
Center for Advanced Eye
New Hampshire · Jun 2026
West Series of Lockton Companies, LLC
New Hampshire · Jun 2026
Easterly Government Properties, Inc.
New Hampshire · Jun 2026
Open Arms Care Corporation
New Hampshire · Jun 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris