Wheelock Street Capital, LLC has notified individuals of a security incident that involved some of their personal information. The company, a private real estate investment firm based in Greenwich, Connecticut, is offering affected individuals complimentary identity monitoring services in response to the incident. Companies that maintain sensitive personal information about clients, tenants, investors, or business partners have a responsibility to protect that data and to notify affected individuals when it may have been compromised.
Wheelock Street Capital’s Data Breach Investigation
In its notification letter, sent under Massachusetts data breach notification requirements, Wheelock Street Capital stated that it recognizes the importance of protecting the personal information it maintains and is writing to inform affected individuals of a security incident that involved some of their information. The company has arranged for affected individuals to receive a complimentary two-year membership of identity monitoring services through TransUnion, including Triple Bureau Credit Monitoring, Triple Bureau Credit Report, and Triple Bureau Credit Score services, along with proactive fraud assistance provided through Cyberscout, a TransUnion company specializing in fraud assistance and remediation.
Wheelock Street Capital’s notification letter does not publicly specify the exact nature of the incident, what caused it, or the specific categories of personal information that were involved beyond describing it broadly as “some of your information.” This is not unusual for a private investment firm responding to a data security incident, particularly where the affected population may include investors, tenants, employees, or other business contacts rather than retail consumers, and the company may be limiting the details it discloses publicly while directing affected individuals to the free monitoring services as the primary protective measure.
Private equity and real estate investment firms like Wheelock Street Capital routinely collect and retain sensitive personal and financial information about investors, tenants, vendors, and employees in connection with property transactions, fund administration, and business operations. This makes them attractive targets for cybercriminals seeking financial account information, Social Security numbers, or other data that can be used for identity theft or financial fraud. When a firm like this experiences a security incident, the financial and reputational stakes for both the company and the individuals whose data was involved can be significant, even when the firm does not publicly disclose every detail of the incident.
Regardless of how much detail a company discloses about the specific cause or scope of a breach, offering free credit monitoring and identity theft protection services, as Wheelock Street Capital has done here, is a standard step companies take to help mitigate the risk of harm to affected individuals. Affected individuals should take advantage of these complimentary services and remain vigilant for any signs that their personal information has been misused, regardless of the level of detail provided in the notification letter itself.
When Did This Breach Occur?
Wheelock Street Capital’s notification letter, dated September 2, 2026, does not specify a precise date on which the underlying security incident occurred or was discovered. The company has stated only that it is notifying affected individuals of a security incident involving some of their information.
What Information Was Breached?
Wheelock Street Capital’s notification letter does not publicly specify which categories of personal information were involved in the incident beyond a general reference to “some of your information.” The company has not disclosed a specific list of compromised data elements in the portion of the notice made available.
What You Can Do
Wheelock Street Capital is offering affected individuals a complimentary two-year membership in TransUnion’s identity monitoring services, including Triple Bureau Credit Monitoring, Triple Bureau Credit Report, and Triple Bureau Credit Score, along with proactive fraud assistance through Cyberscout. Affected individuals should also consider taking the following steps:
- Enroll in the complimentary TransUnion monitoring services using the code provided in your notification letter
- Regularly review financial account statements and credit reports for unauthorized activity
- Consider placing a fraud alert or security freeze with Equifax, Experian, and TransUnion
- Order a free annual credit report at annualcreditreport.com to check for suspicious activity
- Obtain a police report if you believe you have been a victim of identity theft, which Massachusetts law entitles you to request
File a Data Breach Lawsuit Against Wheelock Street Capital
If you received a data breach notification letter from Wheelock Street Capital, you may be entitled to compensation. Companies that collect and store sensitive personal information have a legal obligation to keep that information secure.
Contact us at Class Action U, where we’ll connect you with a lawyer skilled in class action lawsuits. If you’ve been contacted about this breach, received notice, or discovered you were impacted, fill out our quick, easy, and secure form to sign up. There is no cost to reach out to our legal partner and no obligation after speaking with someone from our team.
