Mercer Advisors Data Breach Affects Subscriber Privacy
By Join The Case · Published December 16, 2025 · Updated December 16, 2025 · 5 min read
File Your Claim Now

Dapeer Law, P.A., a top-rated class action law firm, is investigating the Mercer Advisors data breach. If you received notice that your information was exposed during this breach, you may be entitled to compensation. It's free to join our investigation to see if we can help you recover.

Mercer Advisors Data Breach Lawsuit Investigation

Mercer Advisors clients recently received formal notice of a cybersecurity incident that occurred before the company finished integrating Tufton Capital’s systems. If you were notified, you may be entitled to free identity-protection services and potential financial compensation. Use the information below to safeguard your accounts and learn how to join a lawsuit.

Key Takeaways

  • Incident window: May 15 – May 16, 2025.
  • System affected: A segment of Tufton Capital’s computer network (acquired by Mercer Advisors on April 30, 2025).
  • Notification date to consumers: December 12, 2025.
  • Law-enforcement and custodians of impacted accounts were notified.
  • Complimentary Experian IdentityWorks membership offered to impacted individuals.

What Happened?

Mercer Global Advisors Inc. (Mercer Advisors) acquired Tufton Capital on April 30, 2025. Before the newly acquired data could be migrated, cybersecurity specialists detected unusual activity inside a Tufton Capital network segment. An investigation confirmed that an unauthorized party accessed part of that network between May 15 and May 16, 2025.

Forensic experts isolated the affected files, and a data-review firm completed a detailed analysis in October 2025. Mercer Advisors then verified mailing details to notify everyone whose information was present in the compromised files.

What Information Was Involved?

The Maine notice states that the impacted files “contained some of your personal information.” Specific data fields were not enumerated in the publicly available letter.

Company Response

According to the breach notice, Mercer Advisors:

  • Engaged third-party cybersecurity and forensic experts.
  • Implemented remediation measures and additional safeguards for Tufton Capital systems until full integration.
  • Notified law enforcement and impacted asset custodians.
  • Is offering a complimentary membership to Experian IdentityWorks for identity-protection services.

Steps You Can Take Now

  1. Enroll in the free Experian IdentityWorks service by March 31, 2026 using the activation code provided in your letter.
  2. Request a credential reset and, if necessary, a new account number from your custodian.
  3. Monitor bank and investment statements for unauthorized activity.
  4. Review the “Additional Steps You Can Take” section outlined in the breach notice.
Download Official Breach Notice (PDF)

Company Overview

Mercer Global Advisors Inc. (Mercer Advisors) is a Denver-based wealth-management firm founded in 1985. The company provides investment management, estate, tax and financial planning services across the United States.

Frequently Asked Questions

I received a data breach letter from Mercer Advisors — what should I do?

Follow the enrollment instructions for Experian IdentityWorks before the March 31, 2026 deadline, ask your custodian to reset login credentials, and watch your accounts for suspicious activity.

How do I submit a claim related to the Mercer Advisors data breach?

Keep your breach notice, proof of any fraud-related losses, and contact a data-breach attorney to discuss joining a lawsuit. This investigation page will update with filing details as cases progress.

What information did the Mercer Advisors breach expose?

The Maine Attorney General filing confirms personal information was involved but does not list specific data fields.

Did Mercer Advisors offer credit monitoring, and for how long?

Yes. Impacted individuals receive a complimentary Experian IdentityWorks membership. The letter did not specify the duration.

How many people were affected by the Mercer Advisors breach?

The public notice does not disclose an exact victim count. Mercer Advisors has notified all individuals whose data appeared in the compromised files.

How can I get the official breach notice (PDF) for Mercer Advisors?

You can access the state-filed notice directly using the button above or via the Maine Attorney General portal link in the Sources sidebar.

File Your Claim Now