Cresset Capital Management data breach

Clerk's notes

Cresset Capital Management, a wealth management and investment advisory firm, formally reported a data security incident to the Vermont Attorney General on May 14, 2026. The firm caters to affluent individuals, family offices, and institutional investors, routinely managing and storing a large volume of sensitive client data.

The reported incident involved the potential exposure of clients' Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Direct Deposit Account Details, and Investment Portfolio Information. Given the nature of Cresset Capital Management's services, the compromise of such comprehensive financial and personal profiles carries significant risks.

Exposure of these specific data types can leave affected individuals vulnerable to various forms of financial fraud and identity theft. Malicious actors could use this information to attempt unauthorized access to accounts, establish new credit lines fraudulently, or conduct targeted scams designed to exploit detailed knowledge of a victim's financial situation.

As a financial institution, Cresset Capital Management is subject to strict regulatory requirements, including the Gramm-Leach-Bliley Act (GLBA) and the FTC's Safeguards Rule, which mandate robust data security. A data breach often indicates potential deficiencies in these required security measures, which can create grounds for legal action by affected individuals.

If you have received an official data breach notification letter from Cresset Capital Management, it serves as confirmation that your private information was compromised. Such notification establishes your legal standing to pursue potential claims. You are not required to demonstrate actual financial loss or identity theft to have a legal basis to explore your options; the increased risk of future harm and the loss of data privacy may be sufficient. Our firm evaluates these cases on a contingency fee basis.

If a notification letter about this breach reached you, see every Vermont data breach on file or browse all cases.