Data breach
Ameriprise data breach
In 2026, Ameriprise suffered a data breach affecting 8,791,109 records. Exposed data included names, surname, addresses and 7 other types of data.
Breach date
8.8 million
Records in the breach
10
Types of data exposed
Were you affected by the Ameriprise breach?
Enter your email address to see whether it appears in this breach — or any of the other breaches in Leak Database.
Data exposed in the Ameriprise breach
- Names
- Surname
- Addresses
- Phone Numbers
- Email Addresses
- Date of Birth
- Employment Information
- Financial Transactions
- Account Numbers
- SSN Number
About the breach
An unauthorized data breach occurred at Ameriprise Financial in March 2026, linked to an extortion campaign by the ShinyHunters group involving data exfiltration via Salesforce and SharePoint.
Key Details of the Breach
• Date of Incident: Unauthorized access occurred around March 2, 2026 (detected later in March).
• Scale: Officially reported to state regulators as affecting approximately 47,876 to 48,000 U.S. customers, though related database/email listings (such as HIBP records) show over 502,600 unique email addresses impacted.
• Compromised Information: Exposed data included full names, physical addresses, phone numbers, email addresses, dates of birth, employers, job titles, financial transaction details, account numbers, and in some instances, Social Security numbers.
• Attribution: The ShinyHunters group claimed responsibility and allegedly threatened or published compressed internal datasets (up to ~200GB).
Response & Mitigation
• Company Actions: Ameriprise blocked unauthorized access, engaged cybersecurity experts, initiated heightened account monitoring, enhanced identity verification procedures, and began notifying affected individuals while offering credit and identity monitoring services.
• Legal Impact: The incident triggered class-action lawsuits (such as Pamela Caffrey v. Ameriprise) and privacy investigations by law firms regarding notification timelines and data protection.
Key Details of the Breach
• Date of Incident: Unauthorized access occurred around March 2, 2026 (detected later in March).
• Scale: Officially reported to state regulators as affecting approximately 47,876 to 48,000 U.S. customers, though related database/email listings (such as HIBP records) show over 502,600 unique email addresses impacted.
• Compromised Information: Exposed data included full names, physical addresses, phone numbers, email addresses, dates of birth, employers, job titles, financial transaction details, account numbers, and in some instances, Social Security numbers.
• Attribution: The ShinyHunters group claimed responsibility and allegedly threatened or published compressed internal datasets (up to ~200GB).
Response & Mitigation
• Company Actions: Ameriprise blocked unauthorized access, engaged cybersecurity experts, initiated heightened account monitoring, enhanced identity verification procedures, and began notifying affected individuals while offering credit and identity monitoring services.
• Legal Impact: The incident triggered class-action lawsuits (such as Pamela Caffrey v. Ameriprise) and privacy investigations by law firms regarding notification timelines and data protection.
How to protect yourself
In order to start protecting yourself from possible fraud in future, we highly recommend the following steps:
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
1. Monitor your credit reports for possible suspicious activities. If you cannot do this yourself, we recommend you sign up with online services that does this on your behalf.
2. Be on the lookout for an increase in spam or fraudulent calls. We recommend you make use of mobile apps like True Caller, which can assist you in identifying potential spam or fraudulent calls.
3. Monitor your banking transactions. Ensure that you are receiving notifications of transactions by either SMS, your app or email.
Get told about the next breach
A free Leak Database account emails you when your address appears in a newly added breach.