Edelman Financial Engines Data Breach: SSNs Exposed

On Jan. 7, 2026, Edelman Financial Engines, a leading financial planning and investment advisory firm, experienced a data breach involving unauthorized access to sensitive client information. The company discovered the incident on Jan. 8, 2026, and promptly launched an investigation with the assistance of external security experts.

According to a disclosure filed with the Maine Attorney General on Feb. 4, 2026, the breach affected a total of 5,083 individuals in the United States, including five residents of Maine.

Edelman Financial Engines also filed a disclosure with the California Attorney General. The company notified affected consumers in writing on Jan. 28, 2026.

The exposed information includes personally identifiable information (PII) such as names, dates of birth, addresses, phone numbers, email addresses, Social Security numbers and financial planning information.

The breach did not include access to any Edelman Financial Engines account(s), but the nature of the information accessed means that affected individuals could be at increased risk of identity theft or fraud.

Edelman Financial Engines' response

In response to the breach, Edelman Financial Engines took action to terminate the unauthorized access and secure its systems. The company engaged external cybersecurity experts to conduct a thorough investigation and assess the scope of the incident.

The company is offering all affected individuals 24 months of complimentary credit and identity monitoring services through Kroll, a well-known provider of risk mitigation and response services. For questions about the Kroll monitoring services, affected individuals can call the Kroll hotline listed in their notification letter.

The offered services include triple-bureau credit monitoring, a current credit report, dark web monitoring, Social Security number scanning, payday loan monitoring, $1 million in identity fraud loss reimbursement, fraud consultation and identity theft restoration support. Affected individuals are encouraged to enroll in these services by the deadline provided in their notification letter.

Given the sensitive nature of the exposed information, those affected should remain vigilant by regularly reviewing account statements and credit reports for any unauthorized or unexplained activity. Edelman Financial Engines has provided detailed instructions and resources in their notification, including contact information for the major credit bureaus and guidance on placing fraud alerts or security freezes.

If suspicious activity is detected on any Edelman Financial Engines account, individuals should contact the company at 1-888-912-0371, Monday through Friday, 9 a.m. to 9 p.m. Eastern Time.