Almeida Law Group is investigating a data breach at Kovack Financial, LLC. The breach occurred on August 8th, 2025. If you were affected, contact Almeida Law Group.
About Kovack Financial, LLC
Kovack Financial, LLC is the parent company of Kovack Securities, Inc., an independent broker-dealer, and Kovack Advisors, Inc., an SEC-registered investment advisor. The firm is headquartered at 6451 North Federal Highway in Fort Lauderdale, Florida, and provides back-office support, technology, compliance, and consulting services to independent financial advisors. Kovack Securities has approximately 380 retail registered representatives and financial advisors licensed across all 50 states, and Kovack Advisors reported approximately $4.5 billion in total assets under management.
What Happened?
Kovack Financial, LLC was listed in a California Attorney General sample breach notice filed on August 10th, 2026. According to that notice, Kovack detected suspicious activity on its computer network on or around August 28th, 2025. Its investigation determined that an unknown actor gained access to files on the company’s network between August 8th, 2025 and August 27th, 2025. On July 16th, 2026, Kovack determined which individuals’ information was contained in the affected files. Notifications to consumers were sent on August 10th, 2026 — nearly twelve months after the breach was first detected.
A notable gap exists in the breach notice itself: the sentence describing what types of information were involved appears to be incomplete, reading “Our investigation determined that your [blank] were contained within the files accessed.” The actual data types were not specified in the notice text. No ransomware group has publicly claimed responsibility for this incident, and no independent cybersecurity media coverage of the August 2025 attack has been found.
This is Kovack Financial’s second disclosed data breach in two years. In 2024, the company reported a separate incident involving unauthorized access to company email accounts between August 15th, 2023 and September 5th, 2023, as well as a third-party provider compromise between March 15th, 2024 and April 10th, 2024. That earlier breach, reported to the Maine Attorney General on July 9th, 2024, potentially affected more than 43,000 individuals and involved data types including full names, Social Security numbers, dates of birth, medical information, biometric data, payment card data, financial account numbers, and government-issued ID numbers. Multiple law firms investigated that prior breach for potential class action litigation, though no filed lawsuit was confirmed. Separately, Kovack Advisors agreed to a $995,180 penalty with Delaware’s Investor Protection Unit in November 2025 for violations of the Delaware Securities Act involving inaccurate registration filings, supervisory failures, and fabrication of backdated documents — matters unrelated to cybersecurity.
Key Facts at a Glance
- Company or Organization: Kovack Financial, LLC
- Industry: Financial Services — Independent Broker-Dealer and Registered Investment Advisor (RIA)
- Location: Fort Lauderdale, Florida
- Incident type: Unauthorized access to files on company network
- Date of breach: August 8th, 2025
- Date breach discovered: August 28th, 2025
- Date of consumer notification: August 10th, 2026
- Identity theft protection offered: Yes — twelve months of complimentary credit monitoring and identity restoration services through Cyberscout, a TransUnion company
- Prior breach: Yes — a 2023–2024 email account and third-party provider compromise affecting 43,000+ individuals, reported to the Maine Attorney General on July 9th, 2024
- Litigation status: Class action investigations were opened related to the 2024 breach; the ClassAction.org investigation page for that breach is now marked as concluded. No litigation related to the August 2025 incident has been reported.
- Source: California Attorney General sample breach notice (https://oag.ca.gov/ecrime/databreach/reports/sb24-628054); Kovack Financial subsidiaries page (https://kovackfinancial.com/subsidiaries/); ClassAction.org prior breach page (https://www.classaction.org/data-breach-lawsuits/kovack-financial-july-2024); Delaware DOJ penalty announcement (https://news.delaware.gov/2025/12/02/delaware-doj-obtains-nearly-1-million-penalty-from-kovack-investment-advisory-firm/)
What Should You Do?
If you received a notice from Kovack Financial, you should enroll in the twelve months of complimentary credit monitoring and identity restoration services offered through Cyberscout — enrollment instructions were included with the notice letter. Beyond that, consider placing a fraud alert or credit freeze with Equifax, Experian, and TransUnion to make it harder for anyone to open new accounts in your name. Review your financial account statements closely for any unfamiliar activity and order your free annual credit reports at AnnualCreditReport.com or by calling 1-877-322-8228. If you spot signs of fraud or identity theft, visit IdentityTheft.gov for step-by-step guidance on reporting and recovery. Because the specific data types exposed were not disclosed in the breach notice, staying broadly vigilant across your financial accounts is especially important.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
