Cresset Capital Management data breach

Clerk's notes

On May 14, 2026, Cresset Capital Management officially reported a data security incident to the California Attorney General's office. This breach, which occurred on April 6, 2026, is currently under monitoring, indicating an ongoing assessment of the event's full scope and impact on clients of the high-net-worth wealth management firm.

The compromised data types reported include Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Tax Return Information, Direct Deposit Account Details, Mailing Address, and Investment and Portfolio History. This collection of information represents a significant risk for identity theft, financial fraud, and other malicious activities.

Such sensitive financial and personal data, if exposed, can be exploited for fraudulent account access, unauthorized transactions, or to open new lines of credit. The inclusion of tax and investment history further enables sophisticated scams and targeted phishing attempts that can lead to substantial financial losses for victims.

As a financial institution, Cresset Capital Management is held to stringent data protection standards under laws like the Gramm-Leach-Bliley Act and California's specific data privacy statutes. These regulations mandate robust safeguards for client information. A breach of this nature raises questions about the adequacy of security measures in place at the time of the incident.

Receiving a notification letter from Cresset Capital Management confirms that your personal data was part of this exposure. This provides a basis for legal review. If you received such a letter, it is prudent to understand the potential implications and explore available options for recourse regarding the increased risk to your privacy and financial security.

If a notification letter about this breach reached you, see every California data breach on file or browse all cases.