Redtail Technology Discloses Data Breach Affecting J.W. Cole Advisors’ Clients Redtail Technology Inc., a cloud-based CRM provider for financial advisors, reported a data breach that occurred in May 2026, impacting clients of J.W. Cole Advisors Inc. The incident stemmed from a social engineering attack on a Redtail employee on May 13, 2026, allowing an unauthorized third party to briefly access and exfiltrate sensitive data from the company’s systems. Redtail detected and contained the breach by May 14, 2026, then launched an investigation with legal and cybersecurity experts to assess the scope. Exposed data included names, Social Security numbers, and account numbers. On June 8, 2026, Redtail notified J.W. Cole Advisors, which subsequently began mailing consumer notifications on July 6, 2026, after reporting the breach to the New Hampshire Attorney General. Affected individuals are being offered 24 months of complimentary credit monitoring and identity theft protection through Experian IdentityWorks, with enrollment available until September 30, 2026. J.W. Cole Advisors has also provided contact details for inquiries.

Redtail Technology notified Some financial advisors who use their client relationship management software that they may have had their clients’ personal data exposed on the internet. The client relationship software provider told affected advisors that the data was temporarily available to anyone on the internet but affected less than 1% of Redtail’s clients. The data compromised included clients’ names, physical addresses, dates of birth, and Social Security numbers. Redtail has offered affected investors free access to a Symantec product for credit and identity theft monitoring and remediation to make up for the exposure.

The California Office of the Attorney General reported a data breach involving Redtail Technology, Inc. on May 23, 2019. The incident, which was discovered on March 4, 2019, exposed personal information including names, addresses, dates of birth, and Social Security numbers due to unauthorized access to a debug log file. The number of individuals affected is not specified.