Hightower Holding Data Breach

Hightower Holding announced a data breach which resulted in notifications sent to more than 131,000 people in late March 2026 confirming that their personal data had been accessed and downloaded by an unauthorized party.

If you received a letter from Hightower Holding, Hightower Advisors, or any of its affiliated entities, contact our data breach lawyers to learn more.

What Happened in the Hightower Holding Data Breach?

On January 9, 2026, Hightower Holding discovered that a user account within its systems had been compromised, leading to unauthorized access. The company launched an investigation with the help of third-party cybersecurity and digital forensic specialists, which later confirmed that between January 8 and January 9, 2026, files containing sensitive personal information were downloaded without authorization.

The attack appears to have been carried out through a stolen or compromised account credential, one of the most common methods criminals use to bypass corporate security.

Affected individuals were not notified until March 23, 2026, more than two and a half months after the unauthorized downloads occurred.

The Hightower Holding data breach affected approximately 131,483 individuals across the United States. Hightower filed its breach notice with the Maine Attorney General's Office, confirming that 1,557 Maine residents were among those impacted.

What Information Was Exposed?

Based on available breach notices and regulatory filings, the types of personal information exposed in the Hightower Advisors data breach include:

• Full legal names and home addresses
• Social Security numbers
• Dates of birth
• Financial account information
• Investment account records

Why the Hightower Data Breach Deserves Serious Attention

Victims of financial data theft commonly report fraudulent charges on bank and credit card accounts, unauthorized credit applications, government services ordered in their name, personal information appearing on the dark web, and a sharp increase in spam.

The two and a half month delay between the breach and the consumer notifications is also significant. That gap gave bad actors a head start, and it raises legitimate questions about whether Hightower acted quickly enough to protect the people whose data it was entrusted to keep safe.

Can You Sue Hightower for the Data Breach?

Companies that hold sensitive financial data have a legal duty to protect it, and when that protection fails due to inadequate security practices, affected individuals may have the right to pursue compensation through a data breach lawsuit or class action.

The Lyon Firm has extensive experience representing victims of large-scale data breaches and financial privacy violations. Our attorneys know how to hold wealth management companies and financial institutions accountable when their security failures put clients at risk. We have the resources to pursue these cases on behalf of individuals who trusted these companies with their most sensitive information.

If you received a notification letter about the Hightower Holding data breach or the Hightower Advisors data breach, contact The Lyon Firm today for a free, confidential consultation. We work on a contingency basis, which means there is no fee unless we recover compensation for you.