Changeflow GovPing Government General Sax LLP Data Breach Impacts 228,000 Individuals
Priority review Notice Added Final

Sax LLP Data Breach Impacts 228,000 Individuals

Favicon for www.cyber.nj.gov NJ Cybersecurity: Public Data Breaches
Published December 31st, 2025
Detected March 18th, 2026
Email

Summary

Sax LLP, a financial services firm, disclosed a data breach affecting over 228,000 individuals nationwide. The breach, identified in August 2024, compromised personal information including names, dates of birth, and Social Security numbers. Affected individuals are being notified.

What changed

Sax LLP, a New Jersey-based financial services firm, has disclosed a significant data breach that impacted approximately 228,000 individuals across the United States. The breach was detected on August 7, 2024, following unusual network activity, and the subsequent investigation confirmed that sensitive personal information, including names, dates of birth, Social Security numbers, driver's license/state ID numbers, and passport numbers, may have been compromised. The firm has begun notifying affected individuals.

Regulated entities, particularly those in the financial services sector, should be aware of this incident as it highlights ongoing cybersecurity risks. While this notice is informational, affected individuals are advised by the NJCCIC to review guidance on compromised PII and identity theft. Companies should ensure their data security measures are robust and that incident response plans are up-to-date to prevent and mitigate similar breaches.

What to do next

  1. Review data security protocols for potential vulnerabilities.
  2. Ensure incident response plans are current and tested.
  3. Stay informed about evolving data breach notification requirements.

Source document (simplified)

Sax LLP

Post Date: 12/31/2025

Summary

Sax LLP (“Sax”), also known as Sax Advisory Group, disclosed a 2024 data breach affecting its systems, which impacted over 228,000 individuals nationwide. The New Jersey-based financial services firm identified unusual network activity on August 7, 2024, and took steps to secure their systems. Sax initiated an investigation that took over a year to complete. Compromised data may include name, date of birth, Social Security number, driver’s license or state identification number, and passport number. Sax has begun notifying impacted individuals. The NJCCIC recommends that affected individuals review the Compromised PII and Identity Theft NJCCIC Informational Report.

Return to full list >>

Source

Analysis generated by AI. Source diff and links are from the original.

Classification

Agency
GP
Published
December 31st, 2025
Instrument
Notice
Legal weight
Non-binding
Stage
Final
Change scope
Substantive

Who this affects

Applies to
Consumers Employers Financial advisers Public companies
Geographic scope
National (US)

Taxonomy

Primary area
Data Privacy
Operational domain
Compliance
Topics
Cybersecurity Consumer Protection

Get Government General alerts

Weekly digest. AI-summarized, no noise.

Free. Unsubscribe anytime.

Get alerts for this source

We'll email you when NJ Cybersecurity: Public Data Breaches publishes new changes.

Free. Unsubscribe anytime.