Charles Pratt Data Breach Lawsuit Investigation
On December 9, 2025, Charles Pratt began mailing data-breach letters to clients whose personal information was exposed during a June-July 2025 phishing incident. If you received a notice, you may be entitled to free identity-theft protection and possible monetary compensation. Contact us today to discuss your legal options.
Download Official Breach Notice (PDF)Key Facts About the Charles Pratt Breach
- Incident window: June 23 – July 8, 2025
- Breach type: Email account takeover following a phishing email
- Discovery date: July 8, 2025
- Consumer notifications mailed: December 9, 2025
- Identity-protection offered: Two years of complimentary Aura services
- Regulatory filing: Maine Attorney General, December 11, 2025
Timeline of Events
Phishing Email & Unauthorized Access (June 2025)
An employee clicked a fraudulent email that gave an intruder access to the staff member’s mailbox for roughly three weeks. During that time, the attacker read messages, sent spoofed emails, and instructed staff to wire client funds.
Fraudulent Wire Transfer (June 26, 2025)
The attacker’s spoofed internal message led to a significant wire transfer to new banking details. Charles Pratt states the affected client “has been made whole.”
Discovery & Immediate Response (July 8, 2025)
Upon realizing the transfer was fraudulent, Charles Pratt notified the FBI and its managed IT provider, who locked the attacker out of the email environment.
Forensic Investigation (October 1, 2025)
Cyber-forensics firm Cypfer was engaged to investigate and remediate the attack. Charles Pratt will continue working with Cypfer on a semi-annual basis to strengthen security.
What Information Was Exposed?
The compromised mailbox contained documents or messages including one or more of the following:
- Name
- Social Security number
- Date of birth
- Mailing address
- External account numbers
Complimentary Identity-Protection Services
Charles Pratt is providing two years of free Aura credit and dark-web monitoring with fully managed identity-theft recovery. Impacted individuals must enroll by following the instructions and unique activation code included in their letter.
Your Next Steps
- Review the breach letter carefully and enroll in Aura’s services.
- Monitor accounts for unfamiliar activity and report any issues immediately.
- Place a fraud alert or credit freeze with the nationwide credit bureaus if desired.
- Preserve all correspondence; it may be needed for any legal claim.
- Contact our data-breach team for a free case evaluation.
Company Overview
Charles Pratt & Co. LLC (Charles Pratt) is a boutique financial-services firm headquartered at 355 Lexington Avenue #8, New York, NY, United States.
- Industry: Financial Services
- Year founded: 1891
- Employee count: 7
- Website: charlespratt.com
Frequently Asked Questions
I received a data breach letter from Charles Pratt — what should I do?
Follow the enrollment instructions for the free Aura identity-protection service, monitor your financial accounts, and contact our legal team to discuss potential claims.
How do I submit a claim related to the Charles Pratt data breach?
Reach out to us using the contact form on this page or call our office for a no-cost review. We will evaluate your eligibility and guide you through the claim process.
Am I eligible to join a lawsuit against Charles Pratt?
If you received the December 2025 breach notice, you may qualify. Eligibility ultimately depends on the nature of the data exposed and any resulting damages.
What information did the Charles Pratt breach expose?
The mailbox contained personal identifiers such as name, Social Security number, date of birth, mailing address, and external account numbers.
Did Charles Pratt offer credit monitoring, and for how long?
Yes. The firm is offering 24 months of complimentary credit and dark-web monitoring plus identity-theft recovery through Aura.
How can I get the official breach notice (PDF) for Charles Pratt?
You can download it directly from the Maine Attorney General’s site using the button near the top of this article.