FAS Wealth Partners has filed a data breach notice with the Massachusetts Attorney General. This page explains what the notice says, what it leaves out and what steps people can take.
Financial advisory firms hold detailed records about their clients, which is why a network intrusion at one deserves a close look.
FAS Wealth Partners’s Data Breach Investigation
FAS Wealth Partners, Inc. is a registered investment adviser based in Leawood, Kansas. It filed a sample notice letter with the Massachusetts Attorney General’s data breach notification list. The letter tells recipients that the firm experienced a cybersecurity incident that involved unauthorized access to certain files stored on its computer systems, some of which contained personal information.
According to the letter, FAS became aware of suspicious activity within its network on Friday, February 6, 2026. The next day, Saturday, February 7, 2026, the firm says it took steps to secure the network and engaged a team of third-party specialists to investigate the nature and scope of the event. The firm also says it notified regulatory and law enforcement agencies.
After the investigation, FAS says it conducted a thorough review of the relevant information to determine which types of information were potentially affected and who the information related to. It then undertook a separate review of its records to confirm the most current address information for each affected person. The letter states that this address review was completed on October 27, 2026, which helps explain why notices went out many months after the activity was first noticed.
The letter includes one statement meant to reassure clients. It says financial transactions are carried out on entirely separate systems at entirely separate entities that were unaffected by the incident, and that a number of controls are in place on those systems to detect and prevent suspicious financial activity. The letter also says FAS is not aware of any fraud or misuse of information arising from the event.
The copy on file with the state is marked as a draft and addressed to a placeholder recipient. It is dated November 6, 2026. Several fields in the sample appear to be unfilled template text. The sentence describing the types of information involved lists the person’s name followed by what looks like placeholder wording, and the length of the credit monitoring offer is also a blank template field. Because of that, this page does not state which specific types of information were involved beyond the name, and it does not state how long the monitoring lasts.
The filing does not say how many people were affected. It also does not describe how the intruder got into the network, whether the files were copied or only viewed, or whether any group has claimed responsibility. This page does not guess at those details.
FAS says that in response to the event it reviewed its policies and procedures related to data protection and implemented additional safeguards. As an additional step, it arranged for affected people to enroll at no cost in credit monitoring and identity protection services through TransUnion, delivered by Cyberscout, a TransUnion company. The letter says recipients must enroll within 90 days of the date of the letter, and enrollment requires an internet connection and an email account.
The letter encourages recipients to stay vigilant by reviewing account statements and credit reports for suspicious activity, and to contact their financial institution promptly if they see anything unusual. It also directs people to a call center, which the letter says is staffed Monday through Friday from 8 am to 8 pm Eastern time excluding major U.S. holidays, and to their own financial advisor. The enclosed instructions describe how to place a fraud alert or credit freeze with the three national credit bureaus and give contact details for the Federal Trade Commission.
The enclosure also contains state-specific language for residents of Maryland and New Mexico, which suggests the notice was sent to people in more than one state. The filed copy does not say how many states are involved.
Federal and state laws require organizations to safeguard personal information and to notify people when it may have been exposed. Attorneys reviewing incidents like this one look at how the information was protected, how promptly people were told, and whether those affected may have legal options. This page relies only on the filed notice and may be updated as more information becomes available.
When Did This Breach Occur?
According to the notice, FAS became aware of suspicious activity within its network on February 6, 2026, and secured the network the following day, February 7, 2026. It finished confirming current address information for affected people on October 27, 2026, and the sample notice letter is dated November 6, 2026. The filed copy does not say when the unauthorized access began or how long it lasted.
What Information Was Breached?
The notice says the unauthorized access involved certain files stored on FAS computer systems, some of which contained personal information. In the filed sample, the information listed for the recipient is the name, followed by wording that appears to be unfilled template text. The notice does not otherwise specify the types of information involved, so anyone who receives a letter should check it for the details that apply to them.
What You Can Do
If you received a notice related to FAS Wealth Partners or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Enroll in the complimentary credit monitoring and identity protection services within 90 days of the date on your letter, using the activation code it provides.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against FAS Wealth Partners
If you received a notice from FAS Wealth Partners, or you believe your personal information was exposed in this incident, you may have legal options. Whether you can seek compensation depends on the facts, and an attorney can explain whether you may be able to join a class action lawsuit over the exposure of your personal information.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
