Manzil Data Breach Exposes Social Security Numbers

Manzil Investment Advisors LLC, a U.S.-registered, Shariah-compliant robo-advisor, disclosed a data breach that involved unauthorized access to its computer network during the first week of April 2026.

On April 2, 2026, Manzil was alerted to anomalous activity within its computer network. Upon discovery, the company contained the affected systems and launched a thorough investigation into the incident.

The investigation aimed to determine the full extent of the unauthorized activity and whether any personal information may have been accessed or acquired by an unauthorized party.

On May 6, 2026, Manzil determined that between April 2 and April 3, 2026, certain files containing personally identifiable information may have been subject to unauthorized access or acquisition. The types of personal information exposed in the breach included full names and Social Security numbers.

Separately, on April 24, 2026, a threat actor named "uawrongteam" alleged to have been responsible for the breach of systems associated with Manzil. The threat actor claimed to have leaked a dataset of sensitive user data reportedly including Social Security numbers, dates of birth, contact details, banking-related records and transaction data.

The breach was reported to the New Hampshire Attorney General on June 5, 2026. Manzil began notifying affected individuals on or about June 5, 2026.

Manzil Investment Advisors' response to the breach

Manzil is providing complimentary identity monitoring services through Kroll to individuals whose Social Security numbers were potentially impacted.These services include credit monitoring, fraud consultation and identity theft restoration.

Affected individuals can activate their identity monitoring by visiting the Kroll enrollment page and entering the unique membership number provided in their notification letter. The company noted that individuals must complete enrollment by the deadline specified in their letter to take advantage of the complimentary services.

The company has also established a dedicated and confidential call center to answer questions about the incident and provide guidance to affected individuals. Those who have questions can reach the call center at 888-329-8789. The line is available Monday through Friday from 8 a.m. to 8 p.m. Eastern Time, excluding holidays, and will remain open for 90 days from the date of each notification letter.

Manzil urged affected individuals to remain vigilant for any signs of identity fraud or misuse of their personal information. The company also provided contact information for the three major consumer reporting agencies and the Federal Trade Commission as additional resources for protecting against identity theft.