On January 21, 2026, Brown Advisory LLC discovered a security incident involving unauthorized access to certain systems by a recognized threat actor. The company confirmed that this incident did not involve a compromise of their internal systems or access to transactions, trading, or client investments. Regulatory bodies, including the attorneys general of Maine, Indiana, New Hampshire, and Washington, were notified, as was the Massachusetts Office of Consumer Affairs and Business Regulation.
The data compromised in this breach includes personally identifiable information such as names, phone numbers, email addresses, home addresses, Social Security numbers, driver's license images, passport images, and financial account numbers. A total of 1,980 individuals nationwide were affected, with specific counts reported for Maine (14), Massachusetts (134), Indiana (9), New Hampshire (8), and Washington (2). Brown Advisory offered 24 months of complimentary identity theft protection and credit monitoring services through Experian IdentityWorks to affected individuals.
While details continue to emerge, the company has stated there was no evidence of compromise to internal systems beyond the initial unauthorized access.