AssetMark assetmark.com AssetMark data breach: what happened and what to do
AssetMark says it learned on May 15, 2026 that an unauthorized user had accessed files, using employee login credentials. A Rhode Island notice lists names, Social Security numbers and account numbers. The company offers 24 months of credit monitoring.
View all 13,177 breaches- Breach date
- 15 May 2026
- Data exposed
- Names, Social security numbers, Bank account numbers
- Last updated
Reviewed by Anthon Wansland
Head of Product & Co-Founder
Serus is a privacy company with paid tools to find and remove your personal data. This page is free and based on official sources.
What happened
AssetMark, Inc. is a U.S. company that provides investment platforms to financial advisors. In notices to state regulators, it says it became aware on May 15, 2026 that an unauthorized user had gained access to certain files. A later filing says that on or around May 18, 2026 it determined some of those files contained personal information.
AssetMark attributes the access to certain employee login credentials. It says the incident was isolated to AssetMark and was not related to the individuals' financial advisor. The notices were filed with state attorneys general, including California and Washington. The Rhode Island filing counts residents of that state, and the Washington filing counts 15,468 Washington residents. Neither is a national total, and AssetMark's notices that we cite don't give one.
Sources checked: oag.ca.gov, atg.wa.gov, riag.ri.gov
Last verified against the official page:
What was exposed
The supplemental notice filed in Rhode Island lists three kinds of data: name, Social Security number and account number. The version of the letter filed in Massachusetts leaves the data elements as a template field, so the exact list can differ by person. Some law-firm press releases mention other categories and much larger headcounts, but those are solicitations, not notices from AssetMark or a regulator, so this page doesn't rely on them.
What that lets criminals do
A Social Security number is the item to take seriously. Together with a name, it is what lenders and benefit agencies commonly use to verify who you are. Someone holding both can try to open credit in your name, file a tax return in your name or apply for government benefits. These attempts often show up months after a breach, not in the first week.
An account number on its own doesn't let anyone move money, but together with your name it makes a scam about "your investment account" sound real. Expect messages and calls that mention your advisor, your account or a "problem" that needs fixing quickly. The FTC advises that a real company won't ask you to move money to a "safe" account.
What AssetMark is offering
The filed letters describe 24 months of complimentary credit monitoring and identity restoration through Epiq Privacy Solutions. The letter has the enrollment instructions, and the FTC recommends taking free credit monitoring when it's offered.
If you got a letter
Read the letter for the list of data that applies to you, because the template varies. A letter is the notice that counts. If you haven't had one and you have an account through an advisor on AssetMark's platform, you can contact your advisor or AssetMark directly using a phone number from AssetMark's own site.
A credit freeze is the strongest step for Social Security number exposure. It is free, it lasts until you lift it, and you place it at Equifax, Experian and TransUnion separately. The FTC explains how in its guide to credit freezes and fraud alerts.
What to do if you were in it
- 1
Freeze your credit
If your Social Security number was exposed, place a free freeze at Equifax, Experian and TransUnion. The FTC explains how in its guide.
- 2
Enroll in the free monitoring
Use the code in your letter to claim the 24 months of credit monitoring and identity restoration AssetMark offers.
- 3
Check your statements and credit reports
Look for accounts or charges you don't recognize. You can get free reports at AnnualCreditReport.com. If you find fraud, report it at IdentityTheft.gov.
- 4
Be careful with calls about your account
Expect scam messages that mention your advisor or account. Hang up and call your advisor on a number you already have.
- 5
Check your other breaches
Run a free Serus scan to see whether your email or phone number appears in this and other breaches. Serus monitors breach databases and the dark web and alerts you, but it can't remove data that has already leaked.
Official filings
- Washington Attorney General , filed 11 Jun 2026 : 15,468 people
Timeline
-
The breach happened
-
Reported to the Washington Attorney General
Frequently asked
Was I affected by the AssetMark data breach?
If you were, AssetMark mails a notice letter. Its filings with state regulators don't give a national total.
What was exposed?
The Rhode Island notice lists name, Social Security number and account number. The data varies by person.
Does AssetMark offer credit monitoring?
Yes. The filed letters describe 24 months of credit monitoring and identity restoration through Epiq Privacy Solutions.
Should I freeze my credit?
If your Social Security number was in the notice, yes. The FTC says a freeze is free and blocks most new credit in your name.
Sources
Something wrong or out of date? Tell us and we'll re-check it.
