.png)
Commonwealth Trust Company Data Breach Lawsuit Investigation
Shamis & Gentile P.A., one of the nation's premier class action law firms specializing in data breach cases, is investigating the Commonwealth Trust Company data breach.
If you were affected by the data breach, your sensitive personally identifiable information may have been exposed, and you may be eligible for compensation.
About Commonwealth Trust Company
Commonwealth Trust Company is an independent, privately held boutique trust company based in Wilmington, Delaware. Founded in 1931, it focuses on providing professional trust administration services, primarily for high-net-worth individuals and families seeking to preserve wealth across generations.
The company administers more than 650 trusts with over $16 billion in assets under administration. Commonwealth Trust Company works closely with clients’ existing advisers, such as lawyers and wealth managers, to deliver personalized trust administration and succession planning. It is state-chartered and regulated by the Delaware Office of the State Bank Commissioner.
What Happened?
Earlier this year, Commonwealth Trust Company discovered suspicious activity involving an employee email account. On May 13, 2025, an unauthorized individual accessed this account and obtained emails containing sensitive information. The company completed its review of the incident on Aug. 4, 2025, and began notifying affected individuals in September.
Information Exposed:
- Name
- Treating or referring physician
- Patient account number
- Account number
- Treatment information
- Prescription or medication information
- Individual insurance or subscriber number
- Account number with bank name
- Social Security number
- Medical record number
- Medical billing or claims information
- Other health insurance information
- Date of birth
Your Rights and Next Steps
If notified by Commonwealth Trust Company, it is important to remain vigilant. The company has offered complimentary credit monitoring, a credit report, and a credit score for 24 months through Cyberscout, a TransUnion company. Affected individuals can enroll in these services by following the instructions provided in their notification letter.
Steps to consider:
- Review account statements and monitor free credit reports for suspicious activity for at least the next 12 to 24 months
- Consider placing a fraud alert or credit freeze on credit files to prevent unauthorized activity
- Report any signs of identity theft or fraud to relevant organizations and law enforcement
- Take advantage of the credit monitoring services offered, but note that enrollment is not automatic and must be completed within 90 days of receiving the notification
Under federal law, consumers are entitled to one free credit report annually from each major credit bureau.
You May Be Entitled to Compensation
If your information was exposed in the Commonwealth Trust Company data breach, you may have legal rights and could be entitled to compensation. Lawyers are ready to help affected individuals understand their options and pursue claims for damages resulting from this incident.
To find out if you qualify, complete the below form to join the lawsuit investigation and take the next step toward protecting your rights.
.svg)