2026 Directed Trust Company — unauthorised access to self-directed IRA custodian systems; SSNs and account data in state filings
Data compromised
Name, address, Social Security number, driver's license or government ID number, and financial account information. The Texas filing lists 1,346 residents and Vermont lists 9. The total is not disclosed.
Technical writeup
Company-filed notices; the notice letters were not reviewed. No verified company website was found, so profile fields are blank.
Root cause
Directed Trust Company, a trust company that serves self-directed IRA holders, filed breach notices in October 2026. The California filing gives unauthorised access on July 4 and July 7, 2026. The notices do not describe the cause.