Ameriprise Financial data breach: stored files reached in March 2026, account numbers and SSNs, 48,034 people

What happened at Ameriprise?

The letter is short on detail. It says an unauthorized individual gained access to some of the company's stored data and files that may have held the reader's personal information, and that Ameriprise investigated with outside cybersecurity experts. It does not say what kind of system held the files, whether a vendor was involved, or how the person got in. It does not mention ransomware or extortion.

California's record gives March 2, 2026 as the date of the breach, 16 days before the discovery date in the letter.

Date	What happened	Source
March 2, 2026	Breach date in California's and Indiana's records	California and Indiana records
March 18, 2026	Ameriprise discovers and blocks the access	Letter
April 17, 2026	First notices; reported to Washington, Indiana and Massachusetts	Indiana, Washington and Massachusetts records
April 22, 2026	Texas publishes the report	Texas record
May 1 to July 29, 2026	Letters to people found in final quality checks	Supplemental notice to Washington
July 29, 2026	Supplemental notice to Washington; investigation and review concluded	Supplemental notice

The first letters went out 30 days after discovery. That is quick next to most notices in this log; the notice-delay guide has the comparison.

What information was involved in the Ameriprise breach?

The California sample leaves the data line as a placeholder, "[Insert Data Elements]", to be filled in per person. The copy filed in Washington fills it in: name, address, account number and Social Security number. Washington's list adds driver's license or Washington ID number, full date of birth and other information. Texas lists name, Social Security number, financial information and date of birth. Massachusetts marks Social Security numbers and financial accounts for its 2,216 residents.

The Texas fallback in the California notice guide explains how to read a letter whose data line is blank, as this one is in California.

How many people were affected?

Indiana's total is 48,034. The state counts in the records are 2,390 in Texas, 2,216 in Massachusetts, 1,368 in Washington and 748 in Indiana. Washington's count grew after the first filing. On July 29, 2026, Ameriprise told Washington's attorney general that final quality checks had found 368 more of its residents, on top of the 991 first reported. Those add up to 1,359, nine fewer than the 1,368 on Washington's list; neither document explains the difference.

For the people found later, the supplemental notice says the data still may have included name, address, account number, date of birth and Social Security number, and that for 202 of them driver's license information may also have been involved. Their letters went out between May 1 and July 29, 2026. Ameriprise said it had then finished its investigation and data review. Indiana's total is from the first filing and may not include the later letters.

Is my money safe after the Ameriprise breach?

The letter says no unauthorized transactions or movement of funds occurred as part of the incident, and that the company's Online Security Guarantee remains in place. Ameriprise says it has added heightened monitoring to affected accounts, with stronger identity checks. Because account numbers and Social Security numbers were in the files together, the letter asks readers to review their statements and transaction confirmations and report anything they did not authorize.

What is Ameriprise offering?

Twelve months of Equifax Complete Premier credit and identity monitoring at no cost, with the activation code printed in the letter. The letter lists three-bureau credit monitoring, identity restoration and up to $1,000,000 of identity theft insurance. Questions about the notice go to Equifax at 888-504-8526. The guide to credit monitoring offers compares offers like this one.

Was my information in the Ameriprise data breach?

If you are an Ameriprise client and got a letter headed Notice of Data Incident from April 2026 onward, your information was in the files. The letter sets out which data types apply to you. The Washington filing also includes a letter version dated September 29, 2026. If you got no letter and have questions, the Equifax number in the letter is the channel the company gives.

A separate, smaller notice is not the same incident. Ameriprise Financial Services, LLC reported a breach dated December 9, 2025, with 457 people in total in Indiana's record.

What the notices leave open

• How the intruder got into the stored data and files, and what system held them.
• Why the breach date in the state records is 16 days before the discovery date.
• Whether Indiana's total of 48,034 includes the people found in the final quality checks.
• Whether clients' advisers or third-party systems were involved.