LPL Financial Data Breach Investigation
LPL Financial LLC reportedly experienced a hacking/IT incident involving its network, according to information associated with state regulatory filings. The reported information potentially involved includes names, addresses, Social Security numbers, and financial account numbers. Strauss Borrelli PLLC is investigating the LPL Financial data incident and whether affected individuals may have legal claims. If you received a notice or believe you may be affected, fill out the secure contact form on this page to ask about potential claim eligibility.
Key Facts at a Glance
- Entity Involved: LPL Financial LLC (Financial Services)
- Incident Type: Hacking/IT Incident
- Date of Incident: September 29, 2025
- Discovery Date: Not disclosed in the provided filing information
- Official Notice Date: September 14, 2026
- Exposed Information: Names, addresses, Social Security numbers, and financial account numbers
- Affected Population: Under investigation; no reliable count was provided
What Happened?
According to information reported through state attorney general filings in Massachusetts and Vermont, LPL Financial LLC disclosed a hacking/IT incident associated with its network. The filing information identifies September 29, 2025, as the incident date. It does not provide a discovery date, a confirmed explanation of how access was obtained, or details establishing whether a third party was involved. A Massachusetts regulatory record was publicly listed on September 14, 2026, which is also identified in the provided incident data as the official notice date.
Based on the available record, readers should not assume that every listed data element was exposed for every person. The filing indicates that certain personal and financial information may have been involved, but no reliable affected-person count was provided. Individuals should review any notice they received because a personal letter may describe the information relevant to that recipient and any services or response steps offered.
What Information Was Exposed?
The information reported as potentially involved in the LPL Financial incident includes names, addresses, Social Security numbers, and financial account numbers. The particular combination may vary by individual, and the available filing information does not establish that every category was involved for every recipient.
Because LPL Financial operates in the financial services industry, this information could be misused for identity theft, loan or account fraud, deceptive account-verification messages, unauthorized password-reset attempts, or fraudulent wire-transfer requests. Criminals may also impersonate financial representatives and use accurate personal details to make phishing calls, emails, or text messages appear credible.
What Should You Do Next?
- Review your notice carefully: Confirm which information the letter identifies as potentially involved and follow any enrollment instructions for complimentary monitoring or identity-protection services, if offered.
- Monitor financial activity: Examine bank, brokerage, retirement, and credit card accounts for unfamiliar transfers, new payees, changed contact information, or unauthorized password resets. Report suspicious activity directly through a verified telephone number or website.
- Check your credit reports: Obtain reports from the three nationwide credit bureaus and look for unfamiliar accounts, loans, addresses, or inquiries. Consider a credit freeze or fraud alert if your Social Security number may have been involved.
- Be alert for financial phishing: Do not trust unsolicited requests to verify an account, approve a wire transfer, disclose a security code, or reset a password. Independently contact the relevant institution before acting.
- Preserve relevant records: Keep the notice, envelope, suspicious messages, credit reports, fraud reports, and receipts for reasonable protective expenses. These materials may help document the incident’s impact and evaluate potential rights.
Your Legal Rights
People whose information may have been involved could have rights under applicable state privacy, data-security, consumer-protection, or other laws. The existence and scope of any claim depend on factors such as where the person lives, what information was affected, the protections provided, and whether the incident caused financial loss, identity theft, lost time, or other harm.
Receiving a notice does not automatically establish a legal claim, and not receiving one does not necessarily prove that a person was unaffected. Potentially affected individuals may wish to preserve their records, monitor for additional notices, and seek a case-specific legal evaluation. Any filing deadline may depend on the governing law and individual circumstances.
Why Hire Strauss Borrelli PLLC?
Strauss Borrelli PLLC represents consumers in privacy and data-security matters and investigates whether reported incidents may support legal claims. The firm can review available notices and reported harm, explain potential options, and help individuals understand the next steps without assuming that every affected person has the same circumstances or remedies.
If you received a breach notification letter from LPL Financial LLC:
We would like to speak with you about your rights and potential legal remedies in response to this data breach. Please fill out the form, below, or contact us at 872.263.1100 or sam@straussborrelli.com.
