Cresset Capital Management (“Cresset”) data breach

Clerk's notes

Cresset Capital Management, a firm specializing in wealth management and investment advisory services, formally reported a data security incident to the Massachusetts Attorney General's office on May 14, 2026. This filing indicates that Cresset's network infrastructure was compromised, leading to the potential exposure of sensitive personal information.

Given the nature of Cresset's business, which involves managing significant financial and personal details for its clients, any compromise to its systems carries substantial implications. The incident suggests that the information involved, though not specified in detail, could be extensive and valuable to unauthorized parties. Such breaches often create risks for affected individuals, including potential identity theft or various forms of financial fraud.

Financial institutions like Cresset have a fiduciary duty and are subject to strict regulatory standards, including those outlined in the Gramm-Leach-Bliley Act. These frameworks mandate robust safeguards to protect client data. The occurrence of a data breach like this raises questions about the adequacy of the cybersecurity measures in place to prevent unauthorized access to personal information.

If you have received a notification letter from Cresset Capital Management regarding this data breach, it serves as formal notice that your private information may have been compromised. Receiving such a letter often establishes the necessary legal standing to explore your options, even if you have not yet experienced financial harm. Our firm is currently investigating potential legal actions related to this incident.

For those affected, it is generally advised to monitor financial accounts and credit reports for any suspicious activity. Consider placing a fraud alert or security freeze on your credit files as an added precaution. Staying vigilant for any unsolicited communications that request personal details is also a prudent step.

If you believe your personal information was exposed in the Cresset Capital Management data breach and have received a notification, you may be eligible to participate in a case review. Our firm is conducting a no-cost, no-obligation review for affected individuals to determine their eligibility for potential claims. You pay nothing out-of-pocket and owe no attorney fees unless a financial recovery is secured.

If a notification letter about this breach reached you, see every Massachusetts data breach on file or browse all cases.