LPL HOLDINGS, INC.

LPL Financial LLC reported a data breach to the Vermont Attorney General. The breach was reported to the AGO on 2026-09-14. The reporting organization type is Financial Services. 1 Vermont residents were affected. Categories of data breached: Social Security Numbers, Financial Account Codes, Credit and Debit Account Inf.

LPL Financial LLC notified Massachusetts and Maryland residents of a security incident involving an associated financial advisor's device. Unauthorized third-party access via remote access software occurred between September 29, 2025, and June 1, 2026. Affected data includes names, SSNs, account numbers, contact info, and transaction history. LPL contained the incident, rotated credentials, and is offering 24 months of credit monitoring.

LPL Financial LLC notified Massachusetts residents of a security incident where an unauthorized third party accessed a financial advisor's device using remote access software between January 14, 2025, and May 29, 2026. The actor may have accessed an LPL portal containing client data, including names, SSNs, account numbers, and transaction history. LPL contained the incident, rotated credentials, and is offering 24 months of credit monitoring.

LPL Financial LLC notified the New Hampshire Attorney General of a cybersecurity incident affecting 2 NH residents. Unauthorized access to an advisor's portal account occurred starting October 26, 2025, via a malicious script. Personal data exposed included names, SSNs, account numbers, and contact info. LPL contained the breach, worked with law enforcement, and offered 24 months of credit monitoring to affected individuals. Notification was sent June 29, 2026.

LPL Financial LLC reported a cybersecurity incident to the New Hampshire Attorney General on May 20, 2026. A threat actor used social engineering (phishing) to gain unauthorized access to an advisor's LPL portal account on January 8, 2026. The actor initiated an unauthorized ACH transfer from one client account, which was fully reimbursed. The incident resulted in the exposure of one New Hampshire resident's PII, including SSN, account numbers, and contact info. LPL contained the breach by January 23, 2026, and offered two years of credit monitoring to the affected individual.

LPL Financial LLC notified the NH Attorney General of a cybersecurity incident where malware distributed via phishing messages affected financial advisors' devices, leading to unauthorized third-party access to client accounts. Between Nov 20-25, 2025, LPL detected unauthorized securities transactions. Investigation confirmed no sensitive PII was accessed, but 4 NH residents were notified as a precaution. LPL restored accounts, secured systems, and offered 2 years of credit monitoring.

LPL Financial LLC experienced a cybersecurity incident between November 20-25, 2025, involving malware distributed through phishing messages that affected advisor devices. This led to unauthorized third-party access to advisor accounts on LPL's web-based portal, resulting in unauthorized securities transactions and financial transfers. While no evidence of sensitive personal information access was found, clients were notified out of caution. LPL contacted law enforcement, engaged outside experts, stopped the activity, restored accounts, and implemented new security safeguards. Credit monitoring was offered to affected individuals.

LPL Financial LLC reported a cybersecurity incident where malware distributed via phishing messages compromised advisor devices, leading to unauthorized access to client accounts. The breach affected 1,581 individuals, including 2 in Maine. Unauthorized transactions occurred between Nov 10-25, 2025. LPL notified law enforcement, engaged forensic experts, and offered 24 months of credit monitoring. No evidence of ongoing compromise was found.

LPL Financial LLC reported a cybersecurity incident between September 30 and October 10, 2025, where foreign threat actors gained unauthorized access to affiliated financial advisors' online accounts. The actors executed a 'hack pump-and-dump' trading scheme and may have viewed clients' personal information, including names, addresses, and government IDs. LPL contacted law enforcement, secured accounts, and offered 24 months of credit monitoring via TransUnion. The incident is contained.

LPL Financial LLC reported a cybersecurity incident where foreign threat actors accessed affiliated financial advisors' online accounts to execute a "hack pump-and-dump" trading scheme. The breach occurred between September 30 and October 10, 2025, affecting 53 individuals, including 1 Maine resident. Personal information was potentially viewed. LPL contacted law enforcement, secured accounts, and offered 24 months of credit monitoring via TransUnion.