HENNESSY ADVISORS, INC.

Hennessy Advisors, Inc. based in Novato, California, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2026-02-05 and reported on 2026-02-25. 729 Texas residents were affected. 12,643 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information;Driver’s License number;Financial Information (e.g. account number, credit or debit card number). Consumers were notified via U.S. Mail.

Hennessy Advisors, Inc. disclosed a data security incident discovered on March 30, 2025, involving unauthorized access and release of personal information for certain investors in the Hennessy Funds. The company retained third-party specialists to investigate and secure systems. Personal information potentially affected includes identity and financial data. Complimentary credit monitoring and identity theft protection services are being offered to affected individuals.

Hennessy Advisors, Inc., an investment management firm, reported an external system breach on March 30, 2025. Unauthorized access occurred, resulting in the exfiltration of investor personal information. The breach was discovered on March 30, 2025, and notifications were sent on February 23, 2026. Approximately 12,643 individuals were affected, including 48 Maine residents. Identity theft protection services were offered.

Hennessy Advisors, Inc., a publicly traded investment management firm, notified Massachusetts residents of a data security incident that may have affected personal information shared during business dealings. The notice, dated February 23, 2026, states there is no evidence of misuse of the impacted information. The company is offering 24 months of credit and CyberScan monitoring, a $1,000,000 insurance reimbursement policy, and fully managed identity theft recovery services through IDX. The specific nature of the incident, dates of occurrence, and number of affected individuals are not disclosed in the letter.

Hennessy Advisors, Inc. notified the New Hampshire Attorney General of a security incident discovered on March 30, 2025. Unauthorized access to systems resulted in the exfiltration of personal information for 95 New Hampshire residents, including names, SSNs, driver's license numbers, and financial account data. The breach was confirmed in December 2025, and notifications were sent to affected individuals on February 23, 2026, offering credit monitoring services.

Hennessy Advisors Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-30 and was reported on 2026-02-23. 147 Indiana residents were affected. 12,643 individuals affected in total.

Hennessy Advisors, Inc. disclosed a data security incident discovered on March 30, 2025, involving suspicious activity affecting access to certain systems. In late December 2025, the company learned that certain data, including personal information of investors in the Hennessy Funds, had been accessed and released without authorization. On February 5, 2026, the company became aware of unauthorized access to specific individuals' personal information. The company retained third-party specialists, secured systems, and is offering complimentary credit monitoring and identity theft protection services through IDX.

Hennessy Advisors, Inc. notified Nebraska residents of a data security incident discovered on March 30, 2025. Unauthorized access to investor systems occurred, with personal information accessed and released in late December 2025. Notices were sent on February 23, 2026, offering credit monitoring and identity theft protection services.

HENNESSY ADVISORS, INC filed a data-breach notice with the Illinois Attorney General in February 2026 (case 26-02-991). The register records the breach as discovered on February 5, 2026. Personal information types reported: drivers license, financial account number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.