Kovack Financial, LLC, an investment adviser and broker-dealer, detected suspicious network activity around August 28, 2025. Unauthorized access to its network occurred between August 8, 2025, and August 27, 2025. The company determined that personal information was involved on July 16, 2026, and began sending notification letters to affected individuals starting August 10, 2026.
Confirmed data types exposed in the breach include Social Security numbers, financial account information, driver’s license numbers, and government ID numbers. The incident affected at least 1,956 individuals, with 1,713 residents in Massachusetts and 243 in Vermont. The full scope of individuals affected in California has not been publicly released, although a filing was made. No medical data was involved.
While notification letters were sent to consumers in August 2026, additional details about the breach may emerge over time. Regulatory filings with state Attorneys General may provide further clarity on the incident.