Were you recently affected by a data breach?

Perpetual Financial Data Breach

Perpetual Financial, a Massachusetts-based investment advisory firm, is notifying clients that their name, Social Security number, or financial account information may have been exposed in a recent security incident. The firm is offering complimentary identity monitoring services.

Perpetual Financial
Date of Breach: Not publicly disclosed (notification letter dated September 30, 2026)
CAU logo

Who was affected:

Clients of Perpetual Financial

Impacted Data:

Names, Social Security numbers, and/or financial account information

Perpetual Financial, an investment advisory firm based in West Newton, Massachusetts, has notified clients that some of their personal information may have been exposed as a result of a recent security incident. Financial advisory firms handle highly sensitive personal and financial data on behalf of their clients, and when that information is compromised, affected individuals can face a real risk of identity theft and financial fraud.

Perpetual Financial’s Data Breach Investigation

According to a notification letter filed with the Massachusetts Attorney General’s Office, Perpetual Financial wrote to affected clients to inform them of “an incident” involving some of their personal information, including their name in combination with a Social Security number or financial account information. Perpetual Financial’s financial professionals are licensed to sell securities and provide financial advice through Osaic Wealth, Inc., though Perpetual Financial itself is not affiliated with Osaic.

The notification letter states that the firm is reviewing its safeguards and the security of its systems to help prevent a similar incident from happening again, and that additional security measures are being implemented. Perpetual Financial has arranged for affected individuals to receive a complimentary two-year membership in identity monitoring services through CyberScout, a TransUnion company. The filed notice does not disclose how the incident occurred, when it was discovered, or how many people were affected.

Investment advisory and wealth management firms are frequent targets for cybercriminals because they maintain concentrated repositories of exactly the kind of information, Social Security numbers, account numbers, and other financial details, that is most valuable for identity theft and fraud. Regulators in Massachusetts and other states require firms that experience this type of incident to notify both affected individuals and state authorities once the scope of the exposure has been determined.

When Did This Breach Occur?

Perpetual Financial’s notification letter to affected individuals is dated September 30, 2026. The letter filed with the Massachusetts Attorney General does not specify the date on which the underlying security incident occurred or was discovered.

What Information Was Breached?

Perpetual Financial’s notification letter states that the information involved included each affected individual’s name in combination with either a Social Security number or financial account information. The firm has not publicly disclosed additional detail about the specific data elements affected for every recipient.

What You Can Do

Perpetual Financial is offering affected individuals a complimentary two-year membership to CyberScout’s identity monitoring services, including credit monitoring and proactive fraud assistance. If you received a letter from Perpetual Financial about this incident, consider the following steps:

  • Enroll in the complimentary CyberScout credit monitoring service using the unique code provided in your letter before the enrollment deadline.
  • Regularly review your financial account statements and free credit reports for unauthorized activity.
  • Consider placing a fraud alert or security freeze with the three major credit bureaus.
  • Report any suspected identity theft to your local law enforcement and the Federal Trade Commission.

File a Data Breach Lawsuit Against Perpetual Financial

If you received a notification letter from Perpetual Financial about this data breach, or if you believe your personal or financial information may have been compromised as a result of this incident, you may have legal options available to you. Financial firms that handle sensitive client data are expected to implement reasonable safeguards to protect it, and clients affected by a failure to do so may be entitled to pursue compensation.

Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.

Were you recently affected by a data breach?
Other Data Breaches
Date of Breach: July 23, 2026
Date of Breach: Notified to Kansas City Life on July 29, 2026 (DentaQuest vendor incident)
Date of Breach: Not publicly disclosed (notification letter dated September 30, 2026)
Related News

Frequently Asked Questions

A data breach occurs when sensitive, confidential, or protected information is accessed, stolen, or disclosed without authorization. Data breaches often occur through phishing emails, malware, weak passwords, insider threats, or unsecured databases. Indicators of a data breach can include unexpected password resets, suspicious account activity, unauthorized transactions, or notifications from companies about compromised information.If you suspect your data has been compromised, you must take measures and act quickly. Change passwords, enable two-factor authentication, review your financial accounts for unusual activity and consider freezing your credit.

Once stolen, your personal information may be sold on the dark web or used for identity theft and financial fraud. In some cases, hackers use the data to extort companies or launch further attacks. Victims often face long-term risks, including damage to credit and privacy.

If you receive a data breach notification, don’t ignore it. Immediately change passwords for the affected account and any others that share credentials. Enroll in any free credit monitoring services offered and monitor financial statements closely.

To pursue a data breach claim, you’ll need documentation showing your information was compromised and proof of resulting harm, such as fraudulent charges, credit score damage, or identity theft reports. Notification letters, financial records, and communication with the breached company can help support your claim.

Yes. If a company fails to protect consumer data or delays notifying victims, it may be held liable under state and federal privacy laws. Many victims join class action lawsuits to recover financial losses and hold negligent organizations accountable.

Data breach settlements vary widely depending on the size of the breach, type of data compromised, and damages suffered by victims. Payouts may include cash compensation, identity theft protection, or reimbursement for losses. Many settlements range from a few hundred to several thousand dollars per person. A skilled data breach lawyer can guide victims through the complex legal process, ensuring their rights are protected. If you’ve received a data breach notification or believe your personal data was exposed, you may be eligible for compensation. Contact Class Action U to learn more about how to join a data breach lawsuit and understand the process of filing.