Brown Advisory LLC: Brown Advisory Discloses January Data Breach

Brown Advisory LLC Reports Data Breach Affecting 134 Massachusetts Residents

On January 21, 2026, Maryland-based investment management firm Brown Advisory LLC disclosed a data breach involving unauthorized access to sensitive systems. The incident, reported to the Massachusetts Office of Consumer Affairs and Business Regulation, exposed personally identifiable information (PII) of at least 134 individuals in Massachusetts.

The breach did not disrupt the firm’s internal operations, client investments, or trading activities. However, the compromised data included names, phone numbers, email and home addresses, Social Security numbers, driver’s license and passport images, and financial account numbers. A forensic investigation, conducted with cybersecurity experts, confirmed that the threat actor did not access investment or trading data, though the scope of exposed PII remains significant.

In response, Brown Advisory is offering 24 months of complimentary identity protection and credit monitoring through Experian IdentityWorks, which includes daily credit report monitoring, identity restoration support, and up to $1 million in identity theft insurance. Affected individuals have until June 30, 2026, to enroll in the service. The firm has also advised impacted parties to monitor account statements and credit reports for suspicious activity.

Source: https://www.claimdepot.com/data-breach/brown-advisory-2026

Brown Advisory cybersecurity rating report: https://www.rankiteo.com/company/brown-advisory

"id": "BRO1772584327",
"linkid": "brown-advisory",
"type": "Breach",
"date": "1/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"

{'affected_entities': [{'customers_affected': '134 (Massachusetts residents)',
                        'industry': 'Finance',
                        'location': 'Maryland, USA',
                        'name': 'Brown Advisory LLC',
                        'type': 'Investment Management Firm'}],
 'customer_advisories': 'Affected individuals advised to monitor account '
                        'statements and credit reports for suspicious '
                        'activity; enrollment in Experian IdentityWorks until '
                        'June 30, 2026',
 'data_breach': {'number_of_records_exposed': '134+',
                 'personally_identifiable_information': 'Names, phone numbers, '
                                                        'email and home '
                                                        'addresses, Social '
                                                        'Security numbers, '
                                                        'driver’s license and '
                                                        'passport images, '
                                                        'financial account '
                                                        'numbers',
                 'sensitivity_of_data': 'High (Social Security numbers, '
                                        'driver’s license and passport images, '
                                        'financial account numbers)',
                 'type_of_data_compromised': 'Personally identifiable '
                                             'information (PII)'},
 'date_publicly_disclosed': '2026-01-21',
 'description': 'Maryland-based investment management firm Brown Advisory LLC '
                'disclosed a data breach involving unauthorized access to '
                'sensitive systems, exposing personally identifiable '
                'information (PII) of at least 134 individuals in '
                'Massachusetts.',
 'impact': {'data_compromised': 'Personally identifiable information (PII), '
                                'including names, phone numbers, email and '
                                'home addresses, Social Security numbers, '
                                'driver’s license and passport images, and '
                                'financial account numbers',
            'identity_theft_risk': 'High',
            'operational_impact': 'No disruption to internal operations, '
                                  'client investments, or trading activities',
            'payment_information_risk': 'High'},
 'investigation_status': 'Completed (forensic investigation)',
 'references': [{'source': 'Massachusetts Office of Consumer Affairs and '
                           'Business Regulation'}],
 'regulatory_compliance': {'regulatory_notifications': 'Reported to the '
                                                       'Massachusetts Office '
                                                       'of Consumer Affairs '
                                                       'and Business '
                                                       'Regulation'},
 'response': {'communication_strategy': 'Advising affected individuals to '
                                        'monitor account statements and credit '
                                        'reports for suspicious activity',
              'remediation_measures': 'Offering 24 months of complimentary '
                                      'identity protection and credit '
                                      'monitoring through Experian '
                                      'IdentityWorks',
              'third_party_assistance': 'Cybersecurity experts (forensic '
                                        'investigation)'},
 'title': 'Brown Advisory LLC Data Breach Affecting 134 Massachusetts '
          'Residents',
 'type': 'Data Breach'}