EP Wealth Advisors, an SEC-registered investment adviser, announced a cybersecurity incident that occurred on February 2, 2026. The breach involved unauthorized access via compromised employee credentials. The company began sending mailed notification letters to affected individuals between March 6-10, 2026, and also notified the California and New Hampshire Attorneys General starting March 5, 2026.
The breach compromised sensitive client data including names, addresses, email addresses, dates of birth, tax IDs (including Social Security numbers and Employer Identification Numbers), and financial account numbers. While the firm manages assets for over 15,000 clients nationwide, the total number of affected individuals is currently undetermined as notifications are ongoing. The company has stated that the incident was contained within approximately four hours with the assistance of external experts and law enforcement, and there is no evidence of public disclosure or fraudulent use of the data to date.
It is important to remember that details about data breaches can emerge over time, and notifications to affected individuals may be delayed.