Oakmont Capital Holdings LLC d/b/a Oakmont Capital Services data breach

What we know

Oakmont Capital Holdings LLC, doing business as Oakmont Capital Services, is a commercial equipment finance and leasing company that plays a vital role in helping businesses secure the capital and machinery necessary to operate and expand. Because of its position in the equipment finance sector, Oakmont routinely collects, processes, and stores an extensive volume of highly sensitive personal and financial data. This includes information from business owners, corporate officers, guarantors, and individual lessees who apply for commercial loans, credit lines, and equipment leases. The sensitive nature of its operations requires Oakmont to manage complete financial profiles, making it a repository for confidential personal data. In 2025, Oakmont Capital Services reported a notable security incident to the Massachusetts Attorney General, signaling that unauthorized actors may have infiltrated its digital environment. In the financial services and equipment leasing industry, data breaches typically involve sophisticated cyberattacks such as unauthorized access to legacy databases, ransomware deployments, or compromises of third-party vendor platforms used for loan processing and document management. Financial institutions and leasing companies are prime targets for cybercriminals due to the high monetary value of the records they maintain, leaving networks vulnerable to exploitation when security protocols fail or protective updates are delayed. The breach exposed a wealth of sensitive categories, each carrying severe risks of exploitation. Compromised records in a commercial leasing context frequently include full names, dates of birth, Social Security numbers, home addresses, banking details, tax returns, and commercial credit history reports. When Social Security numbers and financial account details are exposed, victims face an immediate and lifelong risk of identity theft, unauthorized credit card applications, fraudulent bank account openings, and tax refund fraud. Furthermore, the exposure of personal financial statements and guarantor data leaves individuals uniquely vulnerable to targeted financial scams and account takeovers. As a financial services provider handling consumer and guarantor credit and financial data, Oakmont Capital Holdings LLC was bound by rigorous legal and regulatory obligations to safeguard this information. Under the Gramm-Leach-Bliley Act (GLBA), federal trade commission guidelines, and state consumer protection statutes, financial institutions must implement robust administrative, technical, and physical safeguards to protect non-public personal information. The occurrence of a data breach strongly suggests a failure in these mandatory security controls, whether through inadequate network segmentation, unpatched vulnerabilities, or insufficient employee training, potentially constituting a breach of contract and negligence under applicable law. Receiving a data breach notification letter from Oakmont Capital Services is formal legal recognition that your private financial data was compromised due to their security failures. Under Massachusetts law, receipt of this notice establishes legal standing to participate in a class action lawsuit aimed at holding Oakmont accountable for failing to protect your information. Importantly, affected individuals do not need to show evidence of actual financial fraud or identity theft to seek legal relief; the increased risk of future harm and the time and expense required to monitor your credit are sufficient grounds. Our firm evaluates these cases on a strict contingency fee basis, meaning you pay nothing unless we successfully recover compensation on your behalf.

See every breach reported in Massachusetts or read what to do after a ransomware attack.