Cobalt Investment Services Data Breach Exposes Sensitive Data

Cobalt Investment Services, a company that provides fund administration and transfer agent services for investment funds, disclosed a data breach involving sensitive personal and financial information.

Cobalt Investment Services experienced a security incident involving personal information the company maintains on behalf of itself and the securities issuers that rely on its services. Because the company acts as an intermediary between investment fund issuers and their investors, it collects and stores sensitive personal and financial information, including details needed to verify investor identities, maintain accounts and distribute tax documents.

This intermediary role means the breach may have affected investors whose personal information was held by Cobalt Investment Services on behalf of the investment funds it administers. Some affected individuals may not have had a direct relationship with the company but may have invested in funds that used its transfer agent services.

The types of personal information that may have been exposed in the incident included names, Social Security numbers, financial account numbers and driver's license numbers.

The breach was disclosed to the Massachusetts Office of Consumer Affairs and Business Regulation on Oct. 30, 2026. Cobalt Investment Services began notifying consumers by written notice on Oct. 30, 2026.

Cobalt Investment Services' response to the breach

Cobalt Investment Services is offering affected individuals 24 months of free credit monitoring services through CyberScout.

To enroll in the offered services, affected individuals can visit the CyberScout activation page and enter the unique code included in their notification letter. Enrollment must be completed within 120 days of the date of the letter.

Individuals with questions about the incident or who need assistance can call the company's dedicated helpline at 321-888-3690. The helpline is available Monday through Friday from 9 a.m. to 5 p.m. EST, excluding certain U.S. holidays.