Hightower Holding Data Breach - 130,000 Affected Individuals

What Happened

In early January 2026, Hightower Holding, a parent company of financial management services, experienced a significant data breach. This incident has led to the exposure of sensitive personal information for over 130,000 individuals. The breach occurred between January 8 and 9, when hackers managed to exfiltrate files containing names, Social Security numbers, and driver’s license numbers from Hightower's environment.

The company has confirmed that the breach was caused by compromised user credentials rather than any security flaws in their systems. This means that the attackers likely gained access through stolen login information, which highlights the importance of robust password management and user authentication practices.

Who's Affected

The data breach has impacted 131,483 individuals, as reported by Hightower to the Maine Attorney General’s Office. Those affected include clients of Hightower Advisors, Hightower Securities, and Hightower Trust Company, all of which operate under the Hightower Holding umbrella. The company is taking steps to notify these individuals and provide support.

While Hightower has stated that there is no indication of the stolen information being used for identity theft or fraud, the potential for such misuse remains a concern for those affected. The breach serves as a reminder of the vulnerabilities that can exist within financial services and the importance of safeguarding personal data.

What Data Was Exposed

The compromised files contained a range of sensitive personal information. Specifically, the data included:

• Names
• Social Security numbers
• Driver’s license numbers

This type of information can be particularly valuable to cybercriminals, as it can be used to commit identity theft or fraud. Hightower is aware of the potential risks and is taking steps to mitigate them by offering affected individuals credit monitoring services for 12 months.

What You Should Do

If you are among those affected by the Hightower data breach, it is crucial to take immediate action to protect yourself. Here are some recommended steps:

• Enroll in the credit monitoring services offered by Hightower to keep an eye on your credit report.
• Change passwords for any accounts that may use the same credentials as those compromised in the breach.
• Monitor your financial statements and credit reports for any suspicious activity.
• Consider placing a fraud alert on your credit file to make it harder for identity thieves to open accounts in your name.

By taking these proactive measures, you can help safeguard your personal information and reduce the risk of identity theft following this breach.