Almeida Law Group is investigating a data breach at Punch & Associates Investment Management, Inc. If you were affected, contact Almeida Law Group.
About Punch & Associates Investment Management, Inc.
Punch & Associates Investment Management, Inc. is a boutique SEC-registered investment advisory firm (CRD #117962) founded in 2002 and headquartered in Edina, Minnesota, in the Minneapolis metro area. The firm provides discretionary investment management and wealth planning services to high-net-worth individuals, families, foundations, pension plans, and institutional clients, and manages approximately $2 billion in assets. Because the firm works directly with clients’ investment accounts and personal financial information, it holds sensitive data that can be valuable to bad actors.
What Happened?
Punch & Associates Investment Management, Inc. was listed in a Vermont Attorney General breach report summary filed on August 24th, 2026. The report identifies the organization as a Financial Services entity and confirms that Social Security Numbers and Financial Account Codes were among the categories of data involved in the breach. The total number of persons affected and the notification date were not specified in the filing.
Separately, multiple threat intelligence sources report that the Akira ransomware group claimed responsibility for an attack on Punch & Associates on its dark web leak site, with that post first observed on May 5th, 2026. Akira alleged it had exfiltrated approximately 10 GB of corporate data, which it claimed included client personal information, employee personal files, confidential financial documents, contracts, agreements, and NDAs. These are attacker-side allegations from a ransomware leak site and have not been publicly confirmed by the company. The Vermont Attorney General filing confirms that a breach occurred and that Social Security Numbers and Financial Account Codes were involved, but does not reference Akira or ransomware by name. The roughly three-and-a-half-month gap between the Akira leak-site claim and the Vermont AG filing is notable, though the actual incident discovery and notification timeline has not been publicly documented. No class action litigation related to this breach has been identified as of August 25th, 2026.
Key Facts at a Glance
- Company or Organization: Punch & Associates Investment Management, Inc.
- Industry: Financial Services — Registered Investment Adviser (RIA)
- Location: Edina, Minnesota (Minneapolis metro area)
- Incident type: Data breach; Akira ransomware group claims responsibility (attacker allegation, not company-confirmed)
- Date breach discovered: August 24th, 2026 (Vermont AG report date)
- Source: Vermont Attorney General breach report summary; DeXpose threat intelligence; RedPacket Security
What Should You Do?
If you received a notice from Punch & Associates Investment Management, Inc., take action promptly to protect yourself. Enroll in any identity theft protection services offered and do so before the enrollment deadline stated in your notice. Place a fraud alert or credit freeze with each of the three major credit bureaus — Equifax, Experian, and TransUnion — to make it harder for someone to open new accounts in your name. Review your bank and investment account statements closely for any unauthorized transactions, and pull your free credit reports at AnnualCreditReport.com to check for accounts or inquiries you do not recognize. Because Social Security Numbers and Financial Account Codes were confirmed as compromised, ongoing monitoring of your credit and financial accounts is especially important. If you spot suspicious activity, report it to the Federal Trade Commission at IdentityTheft.gov, which can help you build a personalized recovery plan.
Your Legal Rights
If your personal information was involved in this breach, you may have legal rights depending on the facts of the incident and the law in your state. Almeida Law Group represents consumers in data breach and privacy litigation and can help you evaluate whether you may have a claim. Contact us at (708) 529-5418 or through our contact page for a free case evaluation.
