Cyrus D. Mehta & Partners Data Breach Lawsuit Investigation
Published: February 24, 2026 | By Nikki Feig, Marketing Manager & Senior Writer

Cyrus D. Mehta & Partners Data Breach: What You Need to Know

Cyrus D. Mehta & Partners has experienced a data breach impacting individuals in Vermont, with sensitive information potentially exposed. The breach was discovered on May 11, 2025, and affected individuals were notified by December 31, 2025.

Timeline of Events

The breach was discovered on May 11, 2025, after suspicious activity was noted in the company's technical environment. Following the discovery, an investigation was launched, and affected individuals were notified by December 31, 2025. The incident was reported to the Vermont Attorney General on February 23, 2026.

Impact Summary

The data breach affected individuals in Vermont. The total number of impacted individuals has not been disclosed, but efforts have been made to secure the data and notify those affected.

Information Exposed

In Vermont, the data breach involved the following types of personal information:

  • Social Security number
  • Address
  • Date of birth
  • Demographic information
  • Passport or other government identification
  • Other identifiers protected by law

What Affected Individuals Should Do

Individuals affected by the breach can enroll in free credit monitoring services by visiting the provided link and using a unique code. Enrollment must occur within 90 days from the notification date. It is advised to follow additional recommended steps to protect personal data.

Company Response

Cyrus D. Mehta & Partners has taken steps to prevent further unauthorized access, including resetting account passwords and enhancing security measures. The company is offering credit monitoring services and continues to monitor the situation closely.

FAQ

Was Cyrus D. Mehta & Partners hacked?

Yes, Cyrus D. Mehta & Partners experienced unauthorized access to their systems, with data exfiltration occurring as a result.

What information was stolen in the Cyrus D. Mehta & Partners data breach?

The breach involved Social Security numbers, addresses, dates of birth, demographic information, passport or government IDs, and other protected identifiers.

How do I know if I was affected by the Cyrus D. Mehta & Partners breach?

Affected individuals in Vermont were notified by December 31, 2025. If you did not receive a notification, you may not be affected.

Is there a lawsuit for the Cyrus D. Mehta & Partners data breach?

As of now, there is no information regarding any lawsuits related to the breach. The company is focused on securing its systems and assisting affected individuals.

What should I do if my data was exposed in the Cyrus D. Mehta & Partners breach?

Enroll in the free credit monitoring services offered, and follow additional steps to safeguard your information. Contact the company if you have further concerns.

How do I get free credit monitoring from Cyrus D. Mehta & Partners?

Visit the provided link in your notification letter, use your unique code to enroll within 90 days, and follow the instructions to activate your credit monitoring services.

Official Sources

Official Notice Documents

The following are official data breach notification documents filed with state attorneys general.

File a Claim