Kovack Financial Discloses Client Data Breach in Oregon
Kovack Financial, LLC reported a data breach to the Oregon Attorney General on August 10, 2026, stemming from an incident on August 8, 2025. The breach exposed sensitive client information, including financial and identity details, which could lead to significant risks for those affected.
- State
- Oregon
- Breach date
- August 8, 2025
- Reported
- August 10, 2026
What may have been exposed
- Full Name
- Social Security Number
- Financial Account Number
- Date of Birth
- Routing Number
- Tax Return Information
- Investment Portfolio Details
- Transaction History
- Mailing Address
Kovack Financial, LLC, a company operating in the financial services sector, confirmed a data breach by filing a report with the Oregon Attorney General on August 10, 2026. The reported breach date was August 8, 2025, and the investigation into the incident is currently ongoing.
The reported exposed data categories include Full Name, Social Security Number, Financial Account Number, Date of Birth, Routing Number, Tax Return Information, Investment Portfolio Details, Transaction History, and Mailing Address. This combination of highly sensitive personal and financial identifiers is a critical concern.
Exposure of this type of comprehensive data can place affected individuals at an increased risk of financial fraud and identity theft. Bad actors could potentially use this information to attempt unauthorized access to accounts, file fraudulent tax returns, or open new lines of credit.
To help protect themselves, individuals who receive a notification from Kovack Financial, LLC should monitor their financial accounts closely for any suspicious transactions. It is also advisable to regularly review credit reports from all three major credit bureaus for any unauthorized activity.
Consider placing a fraud alert or security freeze on your credit files to prevent new accounts from being opened in your name without your consent. Additionally, be cautious of unexpected communications, such as emails or calls, that request personal or financial information, as these could be phishing attempts.
Source: Attorney General filing