{"id":"hightower-wealth-management-data-breach-mar-2026","category":"breach","status":"closed","title":"Hightower wealth-management breach affects 131,483 people after two account compromises","tldr":"Two compromised Hightower accounts allowed January file theft affecting 131,483 people. Reported data includes names, Social Security and driving-licence numbers. Affected families should check credit reports and consider credit freezes.","summary":"Hightower Holding, the wealth-management group behind Hightower Advisors, Hightower Securities and Hightower Trust Company, disclosed unauthorised file downloads affecting 131,483 people. Two compromised accounts enabled downloads on 8–9 and 19–20 January. SecurityWeek and a law-firm announcement identify potentially exposed names, Social Security numbers and driving-licence numbers; the published company letter leaves individual data fields blank. The Maine filing lists 12 March as the discovery date, whereas Hightower’s letter describes discovering compromised accounts on 9 and 19 January; the sources do not explain this difference. Hightower said it secured its network, strengthened security and had no indication of related identity theft or fraud when notifying people. It offered 12 months of credit monitoring and fraud assistance, with enrolment required within 90 days of the letter. The consolidated federal litigation closed on 9 July following voluntary dismissal without prejudice. No later company confirmation of data recovery or subsequent misuse was found through 3 November. There is no consumer software patch.","action":"If you received a notice, review your credit reports and financial statements and consider freezing your credit with Equifax, Experian and TransUnion. The letter’s original 90-day monitoring enrolment window has passed; ask Hightower through your usual adviser whether assistance remains available.","product":"Hightower Holding and its wealth-management subsidiaries","audience":"home","severity":"high","patch":"na","exploited":true,"cves":[],"tags":["hightower","wealth-management","data-breach","identity-theft","compromised-accounts"],"affected":[],"fixed":[],"matches":[],"sources":[{"kind":"advisory","title":"Notice of Data Breach","url":"https://www.classaction.org/media/hightower-advisors-data-breach-notice-2026_1.pdf","by":"Hightower Holding, LLC","date":"2026-03-23"},{"kind":"advisory","title":"Data Breach Notices: Hightower Holding, LLC (Updated)","url":"https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6ec36d72-fc27-49a7-8883-1b4d7ece9e0d.html","by":"Maine Attorney General","date":"2026-03-23"},{"kind":"post","title":"PRIVACY ALERT: Hightower Holding LLC Under Investigation for Data Breach of Over 131,000 Records","url":"https://www.prnewswire.com/news-releases/privacy-alert-hightower-holding-llc-under-investigation-for-data-breach-of-over-131-000-records-302725318.html","by":"Schubert Jonckheer & Kolbe LLP via PR Newswire","date":"2026-03-25"},{"kind":"news","title":"Hightower Holding Data Breach Impacts 130,000","url":"https://www.securityweek.com/hightower-holding-data-breach-impacts-130000/amp/","by":"SecurityWeek","date":"2026-03-26"},{"kind":"post","title":"Adams v. Hightower Holding, LLC — federal court docket","url":"https://dockets.justia.com/docket/illinois/ilndce/1:2026cv03267/497560","by":"Justia","date":"2026-07-09"}],"started":"2026-03-23","closed":"2026-07-09","created":"2026-11-03T21:33:18.095Z","updated":"2026-11-03T21:33:18.095Z","cve_notes":[],"timeline":[{"at":"2026-07-09","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"The court acknowledged the plaintiffs’ voluntary dismissal without prejudice, closing all consolidated cases under the master file. This was not a ruling on liability.","url":"https://dockets.justia.com/docket/illinois/ilndce/1:2026cv03267/497560","by":"Justia","patch":null},{"at":"2026-04-24","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Related lawsuits were consolidated under the Adams case as In Re: Hightower Holding, LLC Data Breach Litigation.","url":"https://dockets.justia.com/docket/illinois/ilndce/1:2026cv03267/497560","by":"Justia","patch":null},{"at":"2026-03-24","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Elliott Adams filed a federal lawsuit against Hightower Holding in the Northern District of Illinois, case 1:26-cv-03267.","url":"https://dockets.justia.com/docket/illinois/ilndce/1:2026cv03267/497560","by":"Justia","patch":null},{"at":"2026-03-23","added":"2026-11-03T21:25:43.261Z","kind":"disclosed","text":"Hightower began written notifications to affected people. Its updated Maine filing reports 131,483 people affected, including 1,557 Maine residents.","url":"https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/6ec36d72-fc27-49a7-8883-1b4d7ece9e0d.html","by":"Maine Attorney General","patch":null},{"at":"2026-01-19","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Hightower discovered a second compromised account. Further files were downloaded without authorisation on 19–20 January.","url":"https://www.classaction.org/media/hightower-advisors-data-breach-notice-2026_1.pdf","by":"Hightower Holding, LLC","patch":null},{"at":"2026-01-08","added":"2026-11-03T21:25:43.261Z","kind":"other","text":"Files were downloaded without authorisation on 8–9 January using a compromised account. Hightower says it discovered that account on 9 January.","url":"https://www.classaction.org/media/hightower-advisors-data-breach-notice-2026_1.pdf","by":"Hightower Holding, LLC","patch":"na"}],"url":"https://hard.fyi/live/hightower-wealth-management-data-breach-mar-2026/","json":"https://hard.fyi/api/live?id=hightower-wealth-management-data-breach-mar-2026"}