IronBridge Wealth Counsel, LLC has reported a data breach to the Vermont Attorney General. The report, dated November 6, 2026, says three Vermont residents were affected and lists Social Security numbers, government ID numbers, and financial account information among the data involved.
Financial firms hold the kind of records that criminals value most, so a report like this deserves a close look even when the public details are limited.
IronBridge Wealth Counsel’s Data Breach Investigation
IronBridge Wealth Counsel, LLC appears on the Vermont Attorney General’s public list of security breach notices. Vermont requires organizations to tell the state when a breach involves a Vermont resident’s personal information, and the office posts a summary table of those reports. The entry for IronBridge Wealth Counsel is dated November 6, 2026, classifies the organization as financial services, and reports three Vermont residents affected.
The entry lists four categories of information: Social Security numbers, government ID numbers, financial account codes, and credit and debit account information. Taken together, those items describe a profile that could be used to impersonate a person, take over an account, or open new credit in someone’s name. A government ID number or a financial account code in the wrong hands is a serious exposure on its own, and the combination with a Social Security number raises the stakes further.
That is nearly everything the public record says right now. The Vermont office no longer posts copies of the notice letters that organizations send to consumers, so there is no letter to read. The summary does not describe how the incident happened, which systems were involved, when an intruder got in, or when the company found out. We searched for any other public information, such as a notice on the company’s own website or a report in another state, and did not find anything we could tie to this filing. This page therefore does not guess at the cause.
The figure of three is a state-level number. It counts only Vermont residents and is not a total for the incident. Firms that report to many states commonly file in each state on or around the date letters go out, and the number of people affected nationwide is often much higher than the number in any one state. IronBridge Wealth Counsel has not published a nationwide count, so the real scope is unknown. Vermont also notes that the figures in its table can change as a company finishes its review.
A wealth management or advisory firm usually keeps detailed files on its clients, including identity documents, account numbers, tax records, and statements, because it needs them to open accounts and move money. When an incident touches that kind of file, the information that was exposed can be broader than a single account number. It is reasonable for clients, former clients, and family members listed on their accounts to watch for a letter and to read it closely. The letter is the best source for which items apply to a particular person.
Vermont’s breach law gives organizations a limited window to notify residents once they have determined that personal information was acquired, and most states set similar deadlines. A filing with the state is generally made close to the time letters are sent, which suggests that people who were affected may already have received a notice by mail or may receive one soon. It is also worth knowing that a notice can reach a person who no longer deals with the firm, because financial companies keep records of former clients for years.
Information like the categories on this filing is also a favorite for follow-on scams. Criminals who hold a real account number or a government ID number can write messages that sound convincing, claiming to be from the firm, a bank, or a government office. Anyone who gets an unexpected call, text, or email about their accounts after a notice like this should stop and use contact details they already trust, rather than the ones in the message.
Until the company says more, the details of this incident remain unconfirmed. This page reports only what the Vermont filing says and will be updated if better information becomes available.
When Did This Breach Occur?
The date of the underlying incident has not been disclosed. The only date in the public record is November 6, 2026, the date of the report on the Vermont Attorney General’s list.
The entry does not say when any unauthorized access began or ended, or when the company first discovered it. Anyone who receives a notice should look for those dates in the letter itself.
What Information Was Breached?
The Vermont entry lists four categories of information: Social Security numbers, government ID numbers, financial account codes, and credit and debit account information. The filing does not break these down further, such as which type of government ID or which kind of financial account, and it does not say whether every affected person had every category involved.
IronBridge Wealth Counsel has not publicly said which data elements applied to each person. The notice you receive is the best source for that, because the specific items can differ from one person to the next.
What You Can Do
If you received a notice from IronBridge Wealth Counsel, or you think you may be affected, consider these steps.
- Read your notice carefully and keep it, along with the envelope and any reference number, so you have a record of what the company told you.
- If the notice offers free credit monitoring or identity protection, enroll before the deadline listed in the letter.
- Check the statements for every bank, brokerage, and card account you hold and look for transactions or changes you do not recognize. If a financial account number was involved, ask the institution about added security or a new account number.
- Request your free credit reports from Equifax, Experian, and TransUnion at annualcreditreport.com and look for accounts or inquiries you did not authorize.
- Consider placing a free fraud alert or a security freeze with each of the three credit bureaus. A freeze can delay new credit applications, so plan ahead before you apply for a loan.
- If a government ID number was involved, ask the issuing agency whether it offers a replacement or an extra layer of protection, and report suspected identity theft to the Federal Trade Commission at IdentityTheft.gov.
File a Data Breach Lawsuit Against IronBridge Wealth Counsel
People whose Social Security numbers, government ID numbers, and financial account details are exposed in a data breach may have legal options if the company failed to use reasonable safeguards to protect them. Whether a claim exists depends on the facts, including what information was involved, how the incident happened, and how the company responded.
If you received a notice from IronBridge Wealth Counsel, or you believe your information was involved, you can speak with a lawyer about whether you may be able to join a class action lawsuit to seek compensation for the exposure of your information, the time you spent responding, and any losses you suffered.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
