Hennessy Advisors Reports Data Breach Affecting Over 12,000 Individuals On February 26, 2026, Hennessy Advisors, Inc., a Pittsburgh-based investment firm, disclosed a cybersecurity incident that exposed the personal information of more than 12,000 individuals. The breach involved unauthorized access to the company’s network, potentially compromising sensitive data, including names paired with driver’s licenses and financial account details. Law firm Lynch Carpenter, LLP, which specializes in data privacy litigation, has launched an investigation into the incident. The firm, with offices in Pennsylvania, California, and Illinois, has previously represented clients in similar cases and is reviewing potential legal claims for affected individuals. Hennessy Advisors has not provided further details on the breach’s origin or the timeline of the unauthorized access. The incident adds to a growing list of financial sector cybersecurity threats, underscoring the risks to personally identifiable information (PII) in investment and advisory services.

Hennessy Advisors Reports Data Breach Impacting Sensitive Personal Information Hennessy Advisors recently disclosed a data breach to the Maine Attorney General, revealing that unauthorized access to its systems may have compromised sensitive personal identifiable information (PII). The incident was detected on March 30, 2025, when the firm identified suspicious activity affecting certain systems and data. An investigation was launched to assess the scope and nature of the breach. The probe confirmed that an unauthorized third party accessed sensitive data, prompting Hennessy Advisors to review the impacted information and identify affected individuals. The exposed data varies by individual but may include names, Social Security numbers, financial account details, and driver’s license information. On February 23, 2026, Hennessy Advisors began notifying impacted individuals via mail, providing details on the specific data exposed and offering complimentary credit monitoring services. The breach notice filed with the Maine Attorney General outlines the incident’s timeline and response measures.