Jacobi Capital Management has notified clients of a data security incident connected to its custodian, LPL Financial LLC. This page explains what the notice says, which information was involved and what steps people can take.
Firms that hold sensitive financial records have a responsibility to protect them, and clients are entitled to clear information when that protection fails.
Jacobi Capital Management’s Data Breach Investigation
Jacobi Capital Management filed a sample notice letter with the Massachusetts Attorney General’s data breach notification list. The letter, signed by the firm’s founder, explains that the incident involves client information maintained at the firm’s custodian, LPL Financial LLC, rather than on the firm’s own servers alone. The letter says the firm contacted clients directly to explain the circumstances.
According to the letter, the firm was made aware on August 19, 2026 of suspicious activity on an LPL portal account belonging to one of its team members. That portal account holds certain client data. LPL began an investigation through its relationship with the firm and determined that remote access software had been installed on the team member’s device as early as August 11, 2026. The letter says the software may have allowed an unauthorized party to access the portal account.
Remote access software gives whoever controls it the ability to see and use a computer as if they were sitting at it. When it is installed without the owner’s knowledge on a device that is logged into a financial portal, it can expose everything the portal can display. The letter says the software was removed promptly after it was found, and that the firm disabled the team member’s portal access, email account and other database access until the device was secured. It also says the hard drive in the device was replaced.
The letter describes the incident window as running from on or about August 11, 2026 through August 19, 2026. It states that the notice was not delayed because of a law enforcement investigation. It also says credentials for databases, portals and email accounts have been updated and that technical measures were put in place to help prevent further unauthorized access.
LPL told the firm that it has not identified any unauthorized transactions affecting client accounts, and the letter says LPL found no evidence of additional unauthorized activity related to the incident. The letter adds that LPL is working with law enforcement on the investigation. Clients may also receive a separate letter from LPL about the same incident.
The letter offers 24 months of credit monitoring and identity theft protection services through Experian at no cost. It tells clients to enroll by January 31, 2027 and to follow the instructions in LPL’s separate letter. Clients with questions about the process are directed to contact their wealth advisor.
The filed copy of the letter is a template. It does not give the date it was mailed, and it does not say how many people received it. No total number of affected clients has been published in the filing, and this page does not estimate one.
Financial advisory clients should take any notice like this seriously because the information involved can be used for more than one type of fraud. Account details and transaction history help a criminal craft convincing messages that appear to come from an advisor or custodian, and a Social Security number can be used to try to open new credit. The letter recommends that clients review account statements and free credit reports regularly and report anything suspicious to their wealth advisor.
Federal and state laws require firms that handle personal financial information to safeguard it and to notify people when it is exposed. Attorneys reviewing incidents like this one look at how the information was protected, how quickly the problem was found, and whether affected people may have legal options. This page relies only on the filed notice and may be updated as more information becomes available.
When Did This Breach Occur?
According to the notice, the firm was made aware of suspicious activity on August 19, 2026. LPL determined that remote access software had been installed on the team member’s device as early as August 11, 2026, and the letter describes the incident window as August 11, 2026 through August 19, 2026. The filed copy of the letter does not give the date it was sent to clients.
What Information Was Breached?
The notice says LPL informed the firm that the following information was or is reasonably believed to have been accessed without authorization: Social Security number or taxpayer identification number, account number and type, contact information including address, phone number and email, and transaction history and account balances. The letter says no unauthorized transactions have been identified. Check your own letter, since the list can differ from person to person.
What You Can Do
If you received a notice related to Jacobi Capital Management or believe you may be affected, consider these steps:
- Read the notice carefully and keep it, along with any enrollment details for protection services it offers.
- Enroll in the 24 months of Experian credit monitoring and identity theft protection the notice offers. The notice tells you to enroll by January 31, 2027 and to review the separate letter from LPL for instructions.
- Place a free fraud alert or a credit freeze with Equifax, Experian and TransUnion, and get your reports free at annualcreditreport.com.
- Review bank, card and insurance statements for anything you do not recognize.
- Be skeptical of unexpected calls, texts or emails that mention the incident, and report suspected identity theft to the Federal Trade Commission at identitytheft.gov.
File a Data Breach Lawsuit Against Jacobi Capital Management
If you received a notice from Jacobi Capital Management or LPL Financial, or you believe your personal or account information was exposed in this incident, you may have legal options. Whether you can seek compensation depends on the facts, and an attorney can explain whether you may be able to join a class action lawsuit over the exposure of your information.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
