AssetMark customer files stolen through employee credentials; 570,000 people reported affected
An intruder downloaded AssetMark customer files on 15 May; filings reported 570,000 people affected. Names, Social Security numbers and account numbers were potentially exposed. Check your notice, monitor accounts and consider freezing US credit files.
If you receive an AssetMark notice, check which details it lists and use its instructions to enrol in the offered monitoring before your stated deadline. Consider freezing your US credit files at Equifax, Experian and TransUnion, review financial statements and credit reports, and promptly report unfamiliar activity to the account provider.
What’s happening
An unauthorised user downloaded customer files from AssetMark, the wealth-management platform used by financial advisers, on 15 May 2026. Subsequent filings reported 570,000 affected people. AssetMark's Rhode Island statement identified potentially exposed names, Social Security numbers and account numbers; each person's notice specifies their affected information. AssetMark said it terminated the access, reset employee credentials, strengthened monitoring and added safeguards. Notifications began in June, and a July supplement documented an expanded Rhode Island notification population. The company offered affected people 24 months of free credit monitoring and identity protection. Breach Census records a lawsuit filed on 22 June. As of 3 November, the sources reviewed do not establish a court outcome, recovery or deletion of the stolen files, criminal charges, or subsequent misuse of the information. This is a data breach with no customer software patch.
- What
- Breach
- Affects
- AssetMark wealth-management customer records
- Fixed in
- Nothing to patch
- Since
- 15 May 2026
- Closed
- 8 July 2026
Timeline
- Update
AssetMark's supplemental Rhode Island filing said notifications there began on 18 June, initially covering 850 residents. By 6 July, it had supplied its mailing provider with files for notices to 1,644 affected residents.
- Update
Breach Census records the filing of Warburton v. Assetmark, Inc., case 3:26-cv-06154, in the Northern District of California.
- Update
The Texas filing reported 570,000 affected people overall, including 29,802 Texas residents, according to AcidPeak's filing record.
- Made public
The breach was publicly disclosed, with filings recorded in Washington and Vermont.
- Update
Around this date, AssetMark's file review established that affected individuals' personal information was present. The company said the incident was confined to AssetMark and did not involve their financial advisers.
- UpdateNothing to patch
AssetMark discovered that an unauthorised user had accessed and downloaded customer files that day. It linked suspicious activity to employee login credentials and said it immediately ended the access and reset employee credentials.
Sources
- AssetMark Notice of Data Breach — undated sample customer letterAssetMark
- AssetMark Supplemental Notice of Data Security EventAssetMark, through Keesal, Young & Logan · 8 July 2026
- AssetMark Inc. data breach notices, Jun 11, 2026 to Jul 8, 2026AcidPeak · 30 Sept 2026
- AssetMark, Inc. — breach and litigation record, data as of 19 September 2026Breach Census · 19 Sept 2026