State records show Rowhouse Financial Partners notified the Maryland Attorney General of a data breach on January 30, 2025. Affected individuals receive a formal notification letter by mail. That letter is proof your information was exposed — and the starting point for a free claim review.
The Maryland Attorney General filing confirms the breach notice — not a court case. Where no court record exists, no settlement figure or deadline is shown. Legal outcomes cannot be predicted or promised.
The official Maryland AG notice for Rowhouse Financial Partners identifies the following exposed data:
These categories are what make the exposure actionable. Sensitive data types carry greater legal weight.
Rowhouse Financial Partners operates within the wealth management and financial services sector, providing comprehensive financial planning, investment advisory services, portfolio management, and estate planning to individual clients and institutions. Because of the core nature of its business, Rowhouse Financial Partners routinely collects, processes, and stores vast quantities of high-value, sensitive personal and financial data. To effectively manage client portfolios, execute transactions, and provide tailored financial advice, the firm maintains extensive personal records that make it a prime repository for confidential information.
In 2025, Rowhouse Financial Partners reported a significant data security incident to the Office of the Maryland Attorney General. While the full forensic scope continues to be evaluated, incidents affecting financial institutions typically involve sophisticated cyberattacks such as unauthorized access to enterprise databases, vulnerabilities within third-party financial software vendors, or credential-harvesting schemes targeting administrative and advisory personnel. In the financial sector, these intrusions often exploit legacy network architecture or third-party integrations, allowing malicious actors to dwell undetected within systems long enough to exfiltrate proprietary databases and sensitive client files.
The exposure resulting from a financial institution breach encompasses severely sensitive categories of information, including full legal names, Social Security numbers, dates of birth, financial account numbers, banking routing numbers, and detailed investment or transaction histories. The compromise of this specific data combination creates immediate and enduring risks for victims. Social Security numbers and dates of birth form the foundational triad for identity theft, allowing malicious actors to open fraudulent credit lines, secure unauthorized loans, or intercept tax refunds. Furthermore, compromised financial account and routing numbers expose victims to direct account takeover, unauthorized wire transfers, and severe monetary loss.
As a financial institution handling non-public personal information, Rowhouse Financial Partners is bound by stringent federal and state regulatory mandates, most notably the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule, alongside state consumer protection statutes. These regulatory frameworks impose affirmative legal obligations to establish comprehensive administrative, technical, and physical safeguards to ensure the security and confidentiality of client records. A data breach of this magnitude serves as prima facie evidence of potential systemic failures in maintaining these mandatory security controls, indicating that the firm may have breached its legal duty of care to its clients.
Receiving an official data breach notification letter from Rowhouse Financial Partners is a formal acknowledgement by the company that your confidential information was compromised due to inadequate security measures. Legally, this notice establishes your standing to participate in a class action lawsuit aimed at holding the institution accountable for failing to protect your data. You do not need to wait until you experience actual financial fraud or out-of-pocket loss to take legal action. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only collect a fee if we successfully recover compensation on your behalf.
Financial harm is not a requirement. The exposure of your personal information is itself recognized as actionable. Check the list — most letter recipients qualify under at least one item:
You received a data breach notification letter from Rowhouse Financial Partners
You were a customer, patient, employee, or client of Rowhouse Financial Partners
Your personal information was stored in Rowhouse Financial Partners's systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Do these four things as soon as possible; each one protects you and strengthens any claim:
Do not discard the Rowhouse Financial Partners letter. It documents your standing as an affected individual — the foundation of any claim you file.
Activate the complimentary credit monitoring referenced in Rowhouse Financial Partners's letter — early fraud detection and a documented harm record both help your claim.
Lock down your credit file at Equifax, Experian and TransUnion with a free security freeze — thieves cannot open accounts on a frozen file.
Time limits can forfeit your claim. Have attorneys review your Rowhouse Financial Partners case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
An unauthorized party accessed Rowhouse Financial Partners systems that stored personal information.
Reported to Attorney General
January 30, 2025
Rowhouse Financial Partners filed its official breach notice with the Maryland Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to Rowhouse Financial Partners letter recipients — the exact mix depends on state law and the data types exposed:
Per-incident statutory damages may be available even without proof of fraud; California's $100–$750 statute is the leading example.
If the breach led to fraudulent charges or unauthorized transactions on your accounts, those losses are recoverable.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Costs of credit monitoring, identity protection services, and restoration help may all be claimed.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Maryland's Personal Information Protection Act (PIPA) requires companies to implement reasonable security measures. Violations can support statutory damages claims even without proof of financial harm.
The companies below also filed breach notices with the Maryland Attorney General. Letter recipients for any of them can pursue a review.
Lyon Management Group, Inc.
Maryland · Jan 2025
Cabrillo College
Maryland · Feb 2025
Christopher L. Mewborn, Attorney, P.A. d/b/a Mewborn & DeSelms, Attorneys at Law
Maryland · Feb 2025
Ott Cone & Redpath, P.A.
Maryland · Jan 2025
ChurchShield
Maryland · Jan 2025
lannuzzi Manetta & Company P.C.; lannuzzi & Darling
Maryland · Jan 2025
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris