LPL Financial

Disclosed Nov 16, 20187 years ago270,000 affectedConfirmed

What is known

People affected	270,000 (as reported by the organization)
Disclosed	Nov 16, 2018
Discovered	Nov 1, 2018
Happened	Nov 1, 2018
Attack	Hacking
Data exposed	Names, Social Security numbers, Payment cards, Financial
Sector	Tech · US
Status	Confirmed

Source	Kind
California Attorney General breach notice: LPL Financialoag.ca.gov · Official notice	Official notice
Washington Attorney General breach notice: LPL Financialatg.wa.gov · Official notice	Official notice
Oregon DOJ breach notice: LPL Financialjustice.oregon.gov · Official notice	Official notice
Indiana Attorney General 2019 data breach report: LPL Financialin.gov · Official notice	Official notice
Indiana Attorney General 2018 data breach report: LPL Financialin.gov · Official notice	Official notice
Maine Attorney General breach notice archive: LPL Financialmaine.gov · Official notice	Official notice

Where	Filed	People
Washington AGresidents of WA	Nov 16, 2018	8,127
California AGresidents of CA	Nov 17, 2018
Oregon DOJresidents of OR	Nov 17, 2018	270,000
Indiana AGresidents of IN	Nov 17, 2018	4,551
Maine AGresidents of ME	Nov 21, 2018
Indiana AGresidents of IN	Dec 19, 2018	1

Breach	Disclosed	Attack	Sector	Status	Affected
Disclosed Sep 14, 2026Sep 1411 days ago	Sep 1411 days ago	Not stated	Finance	Confirmed	Unknown
Disclosed Sep 30, 2021Sep 30, 20214 years agoHacking	Sep 30, 20214 years ago	Hacking	Finance	Confirmed	Unknown
Disclosed Apr 10, 2018Apr 10, 20188 years ago	Apr 10, 20188 years ago	Not stated	Tech	Confirmed	297
Disclosed May 7, 2013May 7, 201313 years ago	May 7, 201313 years ago	Not stated	Tech	Confirmed	Unknown
Disclosed Feb 29, 2012Feb 29, 201214 years ago	Feb 29, 201214 years ago	Not stated	Tech	Confirmed	Unknown

History of this record

2026-09-25 · data_types: [] to ["names","ssn","payment-card","financial"] · backfill source
2026-09-25 · source: empty to https://www.in.gov/attorneygeneral/consumer-protection-division/id-theft-prevention/files/DB-Year-to-date-Report-2018.pdf · backfill source
2026-09-25 · records: 1 to 270000 · backfill source
2026-09-25 · records_basis: empty to organization · backfill source
2026-09-25 · records: empty to 1 · backfill source
2026-09-25 · attack: unknown to hacking · backfill source
2026-09-25 · disclosed: 2018-11-17 to 2018-11-16 · backfill source
2026-09-25 · discovered: empty to 2018-11-01 · backfill source
2026-09-25 · added · backfill source

First seen 2026-09-25 (California AG), confirmed by California AG. Record counts are as reported. Not legal advice.