Kovack Financial, LLC Data Breach Notice (Washington Attorney General)

The data breach at Kovack Financial means that if you were among the 657 Washington residents affected, your Social Security number, driver's license or state ID number, passport number, financial and banking details, and medical information are now in unknown hands more than a year after the incident occurred.

This combination of identifiers creates unusually persistent risks because these pieces of information cannot be cancelled or reissued like a credit card. The filing shows the breach took place on August 08, 2025, yet the notification to the Washington Attorney General was not made until August 10, 2026 — an interval of 367 days.

The Long Delay Between Incident and Notification

State breach notification rules give organisations time to investigate and confirm what happened. A 367-day gap between the August 08, 2025 incident date and the August 10, 2026 filing is nevertheless one of the longest intervals seen in recent Washington filings. The record itself does not explain the reason for the delay, nor does it state when Kovack Financial first discovered the incident.

What matters now is that the exposed categories remain valuable to identity thieves long after the initial event. A Social Security number paired with a driver's license and passport can be used to open accounts, file fraudulent tax returns, or build synthetic identities that mix real and fabricated data across multiple victims.