AssetMark data breach: customer files downloaded with an employee's login, 570,000 people

Oregon's Department of Justice records 570,000 people for AssetMark, with the breach and its discovery both on May 15, 2026 and notice on June 11, 2026, 27 days later. No other record checked here gives a total.

Was my financial advisor involved in the AssetMark breach?

No, according to AssetMark. Its letter says the incident was isolated to AssetMark and not related to the reader's financial advisor.

What happened at AssetMark?

AssetMark says it found suspicious activity tied to certain employee login credentials. It ended the unauthorized access, reset employee credentials, brought in forensic investigators, increased monitoring and added safeguards. On or around May 18, 2026, it found that the files held customers' personal information.

Date	What the letter and the regulators' records say
May 8, 2026	Texas posts a report from AssetMark Trust Company (359 Texans)
May 15, 2026	Files downloaded and AssetMark becomes aware; breach date on the California record
May 18, 2026	AssetMark finds personal information in the files
June 12, 2026	Logged in Massachusetts (15,085)
June 18, 2026	Posted by Texas (29,802)
June 26, 2026	Recorded by California

The AssetMark Trust Company report was posted a week before the May 15 incident. The documents do not say whether the two are related.

What information was involved?

The letter fills in each reader's items, and says Massachusetts law keeps it from giving more detail about the incident. Texas lists names and Social Security numbers. Massachusetts marks Social Security numbers and financial accounts as breached, and medical records, driver's licenses and payment cards as not.

How many people were affected?

Regulator	What it counts	Number
Texas attorney general	Texans (AssetMark, Inc.)	29,802
Massachusetts consumer affairs office	Massachusetts residents	15,085

These two count residents of one state each. The only total on any record is the 570,000 Oregon lists, given above.

What is AssetMark offering?

Twenty-four months of credit monitoring and identity restoration through Epiq Privacy Solutions ID, activated at privacysolutionsid.com before the deadline on the letter.

Item	Detail from the letter
Provider	Epiq, Privacy Solutions ID
Length	24 months
AssetMark call center	1-866-659-7108, Monday to Friday, 9:00 a.m. to 9:00 p.m. Eastern
Epiq help	1-866-675-2006, Monday to Friday, 9:00 a.m. to 5:30 p.m. ET
Postal address	1655 Grant Street, 10th Floor, Concord, CA 94520

The guide to bank, brokerage and mortgage breach notices compares other financial firms' letters.

What the documents leave open

• How the employee credentials were obtained.
• Whether the AssetMark Trust Company report in May is related.
• The total number of customers affected.