Mark Feigenbaum, CFP data breach

What we know

Mark Feigenbaum, CFP is a specialized wealth management and financial planning firm that provides comprehensive advisory services, investment management, retirement planning, and tax strategy consultation to individual clients, families, and small business owners. Because the firm operates at the intersection of private wealth and personal finance, it functions as a central repository for highly confidential client records. To deliver personalized fiduciary services, design wealth portfolios, and manage long-term financial assets, the practice routinely collects, processes, and maintains vast quantities of sensitive non-public personal information. This deep level of financial oversight makes the firm and its digital infrastructure an attractive target for malicious cyber actors seeking to exploit high-value financial data. In 2025, Mark Feigenbaum, CFP reported a significant data security incident to the Massachusetts Attorney General, signaling a major breach of its client database systems. While the exact vectors of the breach remain under active investigation, security events impacting financial planning practices typically involve sophisticated cyberattacks such as unauthorized network intrusions, credential harvesting, or vulnerabilities within third-party financial reporting and client portal software. Financial institutions and advisory firms face persistent threats from cybercriminals who deploy targeted malware or leverage compromised administrative credentials to bypass perimeter defenses, gaining prolonged access to internal databases containing sensitive client ledgers and planning documents. The exposure resulting from this breach compromises critical categories of personal and financial information, creating severe, long-term risks for affected individuals. Exposed records frequently include full names, dates of birth, Social Security numbers, banking and investment account numbers, tax return documents, and detailed asset valuations. When Social Security numbers and detailed financial account credentials are leaked, victims face an immediate and elevated risk of financial account takeover, unauthorized wire transfers, fraudulent loan applications, and devastating tax identity theft. Because financial data cannot be easily changed like a password, individuals whose information was compromised are forced to contend with persistent risks of identity fraud for years to come. As a financial advisory firm holding sensitive consumer financial data, Mark Feigenbaum, CFP is bound by stringent regulatory frameworks, including the Safeguards Rule of the Gramm-Leach-Bliley Act (GLBA) and applicable Massachusetts state data privacy statutes. These laws mandate the implementation of robust administrative, technical, and physical safeguards to ensure the security and confidentiality of client records, including rigorous encryption standards, multi-factor authentication, and continuous network monitoring. The occurrence of a data breach of this magnitude serves as strong prima facie evidence that the firm may have failed to maintain adequate cybersecurity infrastructure, thereby breaching its legal and fiduciary duties to protect private client information. Receiving an official data breach notification letter from Mark Feigenbaum, CFP is a formal acknowledgement that your private financial data was compromised while under the firm's legal custody and control. Under modern legal standards, the receipt of this notice establishes the necessary legal standing to participate in a class action lawsuit, without requiring you to demonstrate that financial fraud has already occurred. Our firm is currently investigating potential legal claims on behalf of all affected clients. We evaluate these cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket, and we only recover fees if we successfully secure a financial recovery on your behalf.

See every breach reported in Massachusetts or read what to do after a ransomware attack.