u/ConsoleAssoc

Up front so nobody wastes their time: I work in marketing for Console & Associates, P.C. We work on data breach claims. I am posting because the details here are relevant to this sub and I would rather say who I am than not. Mods, remove if this crosses the line.

The basics:

Kovack Financial LLC, the Fort Lauderdale parent of Kovack Securities and Kovack Advisors, filed breach notifications on 8/10/26. An unauthorized party had access to the network from 8/8/25 through 8/27/25 and it was discovered on 8/28/25.

That is roughly eleven and a half months between discovery and notification.

Exposed data listed in the filings includes Social Security numbers, driver's license and government ID numbers, and credit, debit and financial account information.

Confirmed counts so far are 1,713 Massachusetts residents and 243 Vermont residents. California received a filing but has not published a number. There is no national total available. Maine's AG breach database, which used to be the easiest place to find one, went offline in June 2026.

Why this matters to this sub specifically:

Kovack supports around 400 independent practices. If you are a Kovack rep, the firm holds your onboarding paperwork, your SSN, your licensing records, and in a lot of cases your banking details for commission deposits. Rep data tends to get overlooked in these notifications because the focus stays on client counts.

The other issue is name recognition. Almost nobody who got a letter banks under the Kovack name. Their statements say the name of their local practice. So you may have clients who received a notice, did not connect it to you, and threw it out.

What I am actually asking:

Nothing, if you do not want to engage. If you are a Kovack rep and you got a notice, I would be interested to know what the letter said about credit monitoring terms and whether reps were notified separately from clients. Those details are hard to get from the AG filings.

Happy to answer questions in the comments.

Up front so nobody wastes their time: I work in marketing for Console & Associates, P.C. We work on data breach claims. I am posting because the details here are relevant to this sub and I would rather say who I am than not. Mods, remove if this crosses the line.

The basics:

Kovack Financial LLC, the Fort Lauderdale parent of Kovack Securities and Kovack Advisors, filed breach notifications on 8/10/26. An unauthorized party had access to the network from 8/8/25 through 8/27/25 and it was discovered on 8/28/25.

That is roughly eleven and a half months between discovery and notification.

Exposed data listed in the filings includes Social Security numbers, driver's license and government ID numbers, and credit, debit and financial account information.

Confirmed counts so far are 1,713 Massachusetts residents and 243 Vermont residents. California received a filing but has not published a number. There is no national total available. Maine's AG breach database, which used to be the easiest place to find one, went offline in June 2026.

Why this matters to this sub specifically:

Kovack supports around 400 independent practices. If you are a Kovack rep, the firm holds your onboarding paperwork, your SSN, your licensing records, and in a lot of cases your banking details for commission deposits. Rep data tends to get overlooked in these notifications because the focus stays on client counts.

The other issue is name recognition. Almost nobody who got a letter banks under the Kovack name. Their statements say the name of their local practice. So you may have clients who received a notice, did not connect it to you, and threw it out.

What I am actually asking:

Nothing, if you do not want to engage. If you are a Kovack rep and you got a notice, I would be interested to know what the letter said about credit monitoring terms and whether reps were notified separately from clients. Those details are hard to get from the AG filings.

Happy to answer questions in the comments.

According to a breach notice filed with the Vermont Attorney General, VICTRA reported that personal information had been exposed in a data security incident. Information reportedly exposed in the breach included full names, Social Security numbers, financial account information, and account numbers. If you are current or former employee or customer, you may have rights and be owed compensation. Click through to learn more.

Did you get a breach notification from MCBS? Your private information may be in the hands of hackers after a recent data breach. If you received a data breach notice from MCBS and were affected may be owed compensation for privacy violations and any future harm they suffer.