Stirlingshire has experienced an unauthorized access to client information. Between September 4, 2024, and October 4, 2024, an unauthorized third party accessed an employee’s Stirlingshire account, allowing them to view emails and gain unauthorized access to the company’s investment platform. While it remains unclear if all client accounts were viewed, Stirlingshire is notifying affected individuals out of an abundance of caution. The breach was discovered on October 11, 2024, and a thorough investigation, completed on October 24, 2024, determined the extent of the incident. A total of 764 individuals were affected by this breach, including one resident of Maine. Stirlingshire has complied with all applicable notification laws and reported the incident to relevant consumer reporting agencies.
Stirlingshire also acted swiftly to contain the breach by removing the unauthorized party from its systems, decoupling the platform’s direct market access, and securing the impacted mailbox. The company has since reinforced its security controls, increased monitoring, and implemented additional measures to prevent future incidents.
To assist those affected, Stirlingshire is offering 12 months of free identity protection services through IDX, a ZeroFox company. This service includes:
- Credit and CyberScan monitoring
- A $1,000,000 insurance reimbursement policy
- Fully managed identity theft recovery services
What Information Was Involved?
The investigation revealed that the unauthorized party may have accessed client data, including:
- Name
- Primary email address
- Account number and type
- Primary phone number
- Last four digits of Social Security number
