Caldwell Sutter Capital Data Breach Exposes Sensitive Financial Information Shamis & Gentile P.A., a class action law firm specializing in data breach cases, is investigating a security incident involving Caldwell Sutter Capital, Inc., a hybrid broker-dealer and registered investment adviser based in Sausalito, California. The breach, linked to a third-party service provider, FoxTrot LLC, exposed the personally identifiable information (PII) of 663 individuals across the U.S., including residents of Maine, Massachusetts, and Vermont. The unauthorized access occurred on April 22, 2026, between 4 and 8 p.m. Pacific Time, with Caldwell Sutter Capital receiving notification from FoxTrot on April 29, 2026. The company collaborated with FoxTrot to assess the impact, though the investigation remains ongoing. Affected individuals were formally notified via written notices on May 29, 2026. Compromised data includes: - Names - Account numbers - Social Security numbers - Financial account details Legal representatives are evaluating potential compensation claims for those impacted, citing consumer protection laws that may apply in cases of exposed sensitive information. The incident underscores the risks associated with third-party vendor vulnerabilities in financial services.