
On August 26, 2025, Ameriprise Financial Services, LLC, a leading financial services provider, discovered a data breach that exposed personally identifiable information (PII) and protected health information of hundreds of current and former clients across the U.S., including at least 411 residents in Texas, and one each in Maine and Massachusetts.
The breach occurred when a phishing incident involving an advisor’s office staff member on Nov. 11, 2025, may have allowed a bad actor temporary access to client information.
The types of information exposed in these incidents included name, address, Social Security number, date of birth, driver’s license number, phone numbers, email address, gender, marital status, citizenship, client ID, group ID, account and policy numbers, account values, and net worth. In some cases, financial account numbers, credit or debit card numbers, and policy numbers were also involved.
For certain individuals, protected health information (PHI) such as medical information and records, as well as details about dependents, was potentially exposed.
The breach was reported to the Maine Attorney General’s office on Sept. 11, 2025, the New Hampshire and Massachusetts Attorney Generals' offices on Dec. 22, 2025, and the Texas Attorney General’s office on Dec. 29, 2025. The company notified affected consumers by U.S. Mail on Sept. 8, 2025.
Ameriprise responded to the breach by immediately investigating the incidents and confirming with the unintended recipients that the information was deleted. They implemented additional safeguards, including enhanced verification procedures for account requests and extra caution when verifying callers.
For those affected, Ameriprise is offering one year of complimentary credit monitoring and identity restoration services through Equifax Complete Premier.
If you receive notification from Ameriprise Financial Services or your provider about this breach, you may want to:








.webp)
.webp)
.webp)

.webp)
.webp)
.webp)
.webp)