Directed Trust Data Breach Compromises Personal and Financial Data

Directed Trust Co., an Arizona-regulated trust company that provides custodial services for self-directed individual retirement accounts, has disclosed a data breach that exposed sensitive personal and financial information belonging to consumers.

A filing with the Texas Attorney General dated Oct. 28, 2026, identifies 1,346 Texas residents as affected by the breach. A separate filing with the Vermont Attorney General dated Oct. 27, 2026, identifies nine Vermont residents as affected by the incident.

The data breach may have potentially exposed a broad range of sensitive personally identifiable information and financial data including names, addresses, Social Security numbers, driver's license numbers and government-issued identification numbers such as passport numbers and state ID card numbers, financial account codes, financial account numbers and credit and debit card account information.

Directed Trust's response to the breach

Directed Trust is notifying affected individuals about the data breach through U.S. Mail. Individuals who may have been impacted by the breach should watch their mailboxes for an official notification letter from the company.

Consumers who hold self-directed IRA accounts with Directed Trust Co. should contact the company directly if they have concerns about the security of their accounts. If any unauthorized activity is identified, they should also notify their other financial institutions right away.