Law Firm Investigates AssetMark Data Breach Exposing Information of 570,000 Individuals

The national class action law firm Edelson Lechtzin LLP announced on June 19, 2026, that it has launched an investigation into data privacy claims against AssetMark, Inc., a wealth management platform. The investigation follows the discovery of a significant data breach on or about May 15, 2026, that may have compromised the sensitive personal information of approximately 570,000 people.

According to a notice from the law firm, AssetMark detected suspicious activity related to user login information in mid-May. A subsequent internal review determined that an unauthorized third party had gained access to its network and exfiltrated certain files containing customer data. The information exposed in the breach is particularly sensitive, potentially including full names, Social Security numbers, financial account information, and government-issued identification numbers.

The exposure of such high-value data creates an immediate and severe risk of identity theft and financial fraud for the individuals affected. In our experience, the operational fallout from these incidents extends far beyond the initial compromise. For small and mid-sized businesses that rely on platforms like AssetMark, a breach introduces a cascade of disruptions, from verifying the security of their own financial data to managing client concerns and complying with potential notification requirements. This underscores the critical need for proactive financial risk management.

Edelson Lechtzin LLP is now investigating the circumstances of the breach to determine if AssetMark failed to adequately protect its clients' information. The firm, which has offices in Pennsylvania and California, is exploring the possibility of filing a class-action lawsuit to seek legal remedies for those impacted. As part of its investigation, the firm is offering free case evaluations to individuals who received a data breach notification from AssetMark, encouraging them to understand their legal rights and potential claims.

The AssetMark incident is part of a broader trend of cyberattacks targeting companies that hold large volumes of personal and financial data. Edelson Lechtzin LLP has recently announced similar investigations into breaches at other major companies, including security provider ADT Inc., Strategic Education Inc., and SunSource Borrower LLC. These incidents often involve the theft of similar data sets, such as Social Security numbers and driver's license numbers, which are highly sought after by malicious actors on the dark web for use in sophisticated fraud schemes. The attack on ADT, for instance, was claimed by the hacker group ShinyHunters, highlighting the organized nature of these cyber threats.

While large corporations are frequent targets, the ripple effects of these breaches are profoundly felt by the small and mid-sized companies within their ecosystem. A breach at a key financial partner can paralyze operations, erode trust, and create unforeseen compliance burdens. Many business owners assume their vendors have impenetrable security, but that is a dangerous assumption. We advise our clients that a robust internal control framework is not optional. It is essential to have a clear plan for vendor risk assessment and an incident response strategy before a crisis hits. Waiting until a notification letter arrives is too late. C&S Finance Group LLC helps clients build these essential safeguards. To learn more about our financial risk management services and prepare your business, visit us at csfinancegroup.com.

For the 570,000 individuals potentially affected by the AssetMark breach, experts recommend taking immediate protective measures. Individuals should carefully review their financial account statements and credit reports for any signs of unauthorized activity. Placing a fraud alert or a credit freeze with the major credit bureaus can provide an additional layer of security against new accounts being opened fraudulently. It is also advised that anyone who received a breach notification letter from AssetMark should retain it, as it may be important for future claims.

The investigation into the AssetMark data breach is in its early stages. The next steps will likely involve further disclosures from AssetMark about the specific vulnerabilities that were exploited and the full scope of the data compromised. Meanwhile, the legal proceedings initiated by Edelson Lechtzin LLP will be closely watched to determine potential liability and compensation for the affected individuals, which could set a precedent for how similar data privacy cases are handled in the financial services industry.