Towerpoint Wealth Data Breach Exposes Sensitive Client Information
Towerpoint Wealth LLC, a Sacramento-based independent wealth management firm, disclosed a data breach that compromised sensitive personal and financial information of clients, including minors. The incident was detected on April 27, 2026, after unauthorized activity was identified within the firm’s systems, with the breach occurring on April 24, 2026.
Upon discovery, Towerpoint Wealth secured its systems and engaged third-party cybersecurity experts to conduct a forensic investigation. The review confirmed that an unauthorized party had accessed and exfiltrated files containing names, Social Security numbers, and financial or investment account details.
On May 1, 2026, the notorious threat group ShinyHunters claimed responsibility for the attack, alleging they had obtained personally identifiable information and internal corporate data. The breach was reported to the California Attorney General on June 5, 2026, the same day notification letters were sent to affected individuals. The total number of impacted clients remains undisclosed.
As part of its response, Towerpoint Wealth is offering 12 months of complimentary cyber monitoring services through Cyberscout to affected individuals and their minor dependents. Enrollment must be completed within 90 days of receiving the notification letter. A dedicated assistance line (1-800-405-6108) has been established for support.
Source: https://www.claimdepot.com/data-breach/towerpoint-wealth-2026
Towerpoint Wealth cybersecurity rating report: https://www.rankiteo.com/company/towerpointwealth
"id": "TOW1781217083",
"linkid": "towerpointwealth",
"type": "Breach",
"date": "4/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Financial Services',
'location': 'Sacramento, California, USA',
'name': 'Towerpoint Wealth LLC',
'type': 'Wealth Management Firm'}],
'customer_advisories': 'Dedicated assistance line (1-800-405-6108) '
'established for support. Notification letters sent to '
'affected individuals on June 5, 2026.',
'data_breach': {'data_exfiltration': 'Yes',
'personally_identifiable_information': ['Names',
'Social Security '
'Numbers'],
'sensitivity_of_data': 'High',
'type_of_data_compromised': ['Personally Identifiable '
'Information',
'Financial/Investment Account '
'Details']},
'date_detected': '2026-04-27',
'date_publicly_disclosed': '2026-06-05',
'description': 'Towerpoint Wealth LLC, a Sacramento-based independent wealth '
'management firm, disclosed a data breach that compromised '
'sensitive personal and financial information of clients, '
'including minors. The incident was detected after '
'unauthorized activity was identified within the firm’s '
'systems, leading to the exfiltration of files containing '
'names, Social Security numbers, and financial or investment '
'account details. The threat group ShinyHunters claimed '
'responsibility for the attack.',
'impact': {'data_compromised': 'Sensitive personal and financial information, '
'including names, Social Security numbers, and '
'financial or investment account details',
'identity_theft_risk': 'High'},
'investigation_status': 'Ongoing',
'ransomware': {'data_exfiltration': 'Yes'},
'recommendations': 'Offering 12 months of complimentary cyber monitoring '
'services through Cyberscout to affected individuals and '
'their minor dependents. Enrollment must be completed '
'within 90 days of receiving the notification letter.',
'references': [{'source': 'Towerpoint Wealth Data Breach Notification'}],
'regulatory_compliance': {'regulatory_notifications': ['California Attorney '
'General '
'(2026-06-05)']},
'response': {'communication_strategy': 'Notification letters sent to affected '
'individuals, dedicated assistance '
'line established',
'containment_measures': 'Systems secured upon detection',
'incident_response_plan_activated': 'Yes',
'third_party_assistance': 'Cybersecurity experts (forensic '
'investigation)'},
'threat_actor': 'ShinyHunters',
'title': 'Towerpoint Wealth Data Breach Exposes Sensitive Client Information',
'type': 'Data Breach'}