Almeida Law Group is investigating a data breach at Cresset Capital Management. The breach occurred on April 6th, 2026 and was discovered on April 14th, 2026. If you were affected, contact Almeida Law Group.
About Cresset Capital Management
Cresset Capital Management is an independent multi-family office and private wealth management firm founded in 2017. Headquartered at 444 West Lake Street in Chicago, Illinois, the firm provides wealth management, family office services, investment advisory, and tax and estate strategy to ultra-high-net-worth individuals, families, entrepreneurs, and executives. As of July 2026, the firm reports more than $260 billion in assets under management and advisement across offices in more than 20 U.S. cities. Because Cresset serves high-net-worth clients and manages substantial financial assets, the personal and financial data it holds is particularly sensitive and valuable to bad actors.
What Happened?
Cresset Capital Management was listed in a Texas Attorney General data security breach report (record BR-0005235). On April 6th, 2026, Cresset detected suspicious activity within its computer network. The company activated its incident response protocols, contained the activity, and engaged third-party cybersecurity professionals. The breach was discovered on April 14th, 2026, and Cresset began mailing notification letters to affected individuals on May 14th, 2026. In total, 9,884 individuals were affected. The compromised information included names, addresses, dates of birth, Social Security numbers, driver’s license numbers, government-issued ID numbers such as passports and state IDs, and financial information such as account numbers and credit or debit card numbers. These data types are confirmed by the company’s breach notification letter filed with the California and Texas Attorneys General.
Cresset stated that client assets, funds, and accounts were not compromised and that firm operations continued without disruption. The company offered affected individuals a complimentary two-year Experian IdentityWorks Credit Plus 3B membership. Financial Advisor magazine reported that at least 1,915 clients had their data breached; the higher total of 9,884 in the Texas AG filing may reflect non-client individuals such as employees or other data subjects. The attack vector has not been publicly disclosed. As of August 10th, 2026, no ransomware group has claimed responsibility for the incident. Multiple law firms have publicly announced investigations into potential class action claims, though no formal complaint had been filed in court as of the research date.
Key Facts at a Glance
- Company or Organization: Cresset Capital Management
- Industry: Financial Services — Private Wealth Management / Multi-Family Office
- Location: Chicago, Illinois 60606
- Incident type: Unauthorized access to computer network
- Date of breach: April 6th, 2026
- Date breach discovered: April 14th, 2026
- Date of consumer notification: May 14th, 2026
- Total persons affected: 9,884
- Identity theft protection offered: Two-year Experian IdentityWorks Credit Plus 3B membership
- Litigation status: No filed class action as of August 10th, 2026; multiple law firms have announced pre-litigation investigations
- Source: Texas Attorney General data security breach report (BR-0005235); Cresset breach notification letter (California AG); Financial Advisor magazine
What Should You Do?
If you received a notification letter from Cresset Capital Management, enroll in the complimentary two-year Experian IdentityWorks Credit Plus 3B membership as soon as possible and note any enrollment deadline stated in your letter. Regardless of whether you enroll, consider placing a fraud alert or credit freeze with all three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. Monitor your existing financial accounts closely for unauthorized transactions and review your credit reports regularly. You can obtain free credit reports at AnnualCreditReport.com. If you believe your information has already been misused, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
