EP Wealth Advisors, LLC Data Breach Notice (Oregon Attorney General): What Was Exposed & What To Do

Tens of thousands of people may need to treat their personal information as exposed after EP Wealth Advisors, LLC reported a data breach tied to an incident in early February 2026. When a firm that handles wealth and financial advice is involved, the practical stakes are straightforward: the same details used to manage accounts, taxes, and identity can also be misused for fraud or account takeover if they fall into the wrong hands.

According to a filing reported to the Oregon Department of Justice on March 06, 2026, the firm notified Oregon residents of the breach. The filing places the incident itself on February 02, 2026, and states that 47,043 people were affected. Public detail beyond that notice remains limited, so anyone who has been a client or whose data may have been held by the firm should focus on verified steps rather than speculation.

Breaking down the breach

EP Wealth Advisors, LLC submitted a data breach notice that was reported to the Oregon Attorney General’s office, via the Oregon Department of Justice, on March 06, 2026. That filing identifies the underlying incident date as February 02, 2026, and puts the number of people affected at 47,043. The notice characterizes the exposed material as personal information, consistent with the breach notification language used in the filing.

How the incident occurred, how long unauthorized access lasted, whether systems were encrypted or ransomed, and whether a specific intrusion path was confirmed are not described in the disclosed facts. No threat actor is named in the available record. What is established is the organization’s formal notice to Oregon residents, the reported incident date, the affected-person count, and the high-level description of personal information as the category of data involved.

How a breach like this happens

In general terms, incidents that lead to notices like this often begin with stolen or guessed credentials, a phishing message that tricks someone into handing over access, a vulnerable remote-access or email system, or malware that gives an outsider a foothold inside a network. Once inside, attackers commonly look for file shares, customer databases, email archives, or backup stores that contain concentrated personal and financial records.

Organizations then investigate, determine whose information was involved, and issue notices required by state law when residents’ personal data may have been accessed or acquired. That sequence is typical background for this class of event; it is not a reconstruction of EP Wealth Advisors’ specific case, because the public filing summarized here does not spell out the technical method. No group is attributed in the facts, and none should be assumed.

About EP Wealth Advisors, LLC

EP Wealth Advisors, LLC is a wealth-advisory firm. Firms in this sector typically work with individuals and families on investment management, financial planning, retirement, and related advice. In the ordinary course of that work they collect and retain identifying details, contact information, and often sensitive financial and tax-related records needed to open accounts, meet regulatory obligations, and serve clients over time.

A breach at such an organization is consequential because the data set is not casual. Advisors and their custodians or partners may hold Social Security numbers, dates of birth, addresses, account identifiers, and documents that map a person’s financial life. Even when a notice only says “personal information,” the sector context explains why regulators require disclosure and why affected people are urged to monitor credit and accounts carefully. Nothing in the public summary establishes negligence; it establishes that a notifiable incident was reported.

The information in question

The breach notification, as reflected in the Oregon filing summary, names the exposed data as personal information. It does not itemize every field in the public facts provided here. Exact contents beyond that label are therefore unconfirmed in this record.

Wealth-advisory firms commonly hold names, addresses, phone numbers, email addresses, dates of birth, Social Security numbers or other government identifiers, and financial account or tax-related details. Those categories are typical for the industry; they are not a confirmed inventory of what was exposed in this incident. Readers should rely on the individual notice they receive from the firm for the specific data elements tied to their own record.

Why it matters

For affected people, the main risks are identity theft, new-account fraud, tax-related fraud, and social-engineering attempts that sound legitimate because the caller or email already knows personal details. Criminals sometimes wait months before using stolen data, so a calm, sustained watch on credit reports, bank and brokerage statements, and IRS or state tax accounts is more useful than panic.

For the organization, a breach of this scale means notification duties across jurisdictions, potential regulatory scrutiny, remediation costs, and lasting pressure on client trust. The reported figure of 47,043 people indicates a significant population that may need support, credit monitoring offers if provided, and clear guidance—not that every person will experience fraud. Concrete caution beats sensational claims: freeze or lock credit if appropriate, treat unexpected financial outreach with skepticism, and document any suspicious activity promptly with the relevant institution.

Were you affected?

If you are or were a client of EP Wealth Advisors, LLC, or if you receive a breach letter referencing the February 02, 2026 incident, read the notice carefully for the data types it lists and any free credit-monitoring or identity-protection enrollment steps. Place fraud alerts or credit freezes with the major credit bureaus if you are concerned, monitor financial and tax accounts, and change passwords on related email and financial logins—preferably with unique passwords and multi-factor authentication. Keep the notice; it can help if you later need to dispute fraudulent activity.

You can also run a free exposure scan of your email address to check whether that address has already appeared in known breach data sets elsewhere, which helps you prioritize password changes and monitoring even when a single firm’s full file contents are not public. Official updates should come from EP Wealth Advisors or from regulators; treat unsolicited calls or links claiming to “fix” the breach as potential scams unless you independently verify them.

AICompiled with AI assistance from public sources and published under our editorial standards.