Cresset Capital Management Data Breach Exposes Client Financial Data

Cresset Capital Management, a firm specializing in wealth management and investment advisory, reported a data security incident to the Vermont Attorney General on May 14, 2026. This breach involved unauthorized access to its digital network environments, affecting clients whose highly sensitive financial and personal profiles it manages.

The reported breach exposed various categories of sensitive client data. This includes Full Name, Social Security Number, Date of Birth, Financial Account Number, Routing Number, Tax Return Information, Direct Deposit Account Details, and Investment Portfolio Information. Such extensive exposure can create significant risks for affected individuals.

For high-net-worth individuals and others whose data was compromised, this exposure carries severe, multi-faceted risks. Malicious actors gaining access to this level of detail could attempt sophisticated financial fraud, unauthorized account access, or targeted identity theft. The comprehensive nature of the exposed information makes it particularly dangerous for victims.

If you received a notification letter from Cresset Capital Management, it confirms your data was involved in this incident. We recommend reviewing the letter carefully for any specific guidance provided by the company. It's also prudent to proactively monitor your financial accounts and credit reports for any suspicious activity and consider placing a fraud alert or credit freeze.

Financial institutions like Cresset Capital Management are bound by strict federal and state regulations to protect client data, such as the Gramm-Leach-Bliley Act. A data breach may indicate a failure to meet these security standards. Receiving a notification letter establishes your legal standing to explore your rights and potential remedies. Our team offers a free, no-obligation case review to discuss what this breach means for you.