Miller/Howard Investments, Inc. data breach

What we know

Miller/Howard Investments, Inc. is a prominent investment management firm specializing in dividend-focused equity strategies, independent research, and wealth management services for institutional clients, high-net-worth individuals, and retail investors. Because of its core operations in asset management and financial planning, the firm routinely collects, processes, and maintains vast quantities of deeply sensitive personal and financial data. To properly manage portfolios, execute trades, and comply with strict regulatory reporting standards, Miller/Howard must gather comprehensive financial records, banking details, and personal identifiers from its clients. In 2025, Miller/Howard Investments, Inc. formally reported a security incident to the Illinois Attorney General, signaling a critical compromise of its digital infrastructure. While the exact vectors of cyberattacks targeting financial institutions often involve sophisticated ransomware deployment, credential harvesting, or vulnerabilities within third-party vendor networks, an incident of this nature typically indicates that unauthorized actors gained access to restricted corporate databases and internal file repositories. For an investment firm holding high-value target assets and sensitive client portfolios, such a breach suggests potential gaps in network perimeter security and endpoint monitoring. The data compromised in financial sector data breaches routinely includes full names, Social Security numbers, dates of birth, financial account numbers, routing numbers, and detailed investment history. When exposed, this combination of high-value personal and financial information creates immediate and severe risks for affected individuals. Social Security numbers and dates of birth form the core components required to execute identity theft and open fraudulent lines of credit, while exposed financial account and routing details leave victims highly vulnerable to direct account takeover, unauthorized wire transfers, and targeted financial fraud. As a financial institution handling non-public personal information, Miller/Howard Investments, Inc. was bound by stringent legal obligations under federal and state statutes, including the Gramm-Leach-Bliley Act (GLBA) and applicable state data protection laws. These regulatory frameworks require financial entities to implement rigorous administrative, technical, and physical safeguards to protect sensitive customer data from unauthorized disclosure. The occurrence of a significant data breach strongly suggests a potential failure to maintain adequate security controls, encryption standards, and continuous threat monitoring, giving rise to potential legal liability for negligence and breach of implied contract. Receiving a data breach notification letter from Miller/Howard Investments, Inc. is a formal acknowledgment that your private financial and personal information was compromised due to inadequate corporate security practices. Legally, this notice establishes the foundation for affected individuals to participate in a class action lawsuit seeking accountability, restitution, and enhanced credit monitoring services. Importantly, under modern legal standards, victims do not need to prove that they have already suffered actual financial loss to pursue claims; the increased, imminent risk of identity theft is sufficient to establish legal standing. Our firm handles these complex class action cases on a contingency fee basis, meaning you pay absolutely nothing out of pocket and owe no legal fees unless we successfully recover compensation on your behalf.

See every breach reported in Illinois or read what to do after a ransomware attack.