The Generational Equity data breach occurred on February 15-16, 2023, when unauthorized third-party actors gained access to the company’s internal computer systems. The breach exposed the sensitive personal and financial data of more than 2,200 individuals, including Social Security numbers, tax returns, bank account details, and proprietary business documents. Generational Equity issued notification letters to affected individuals in late 2023, triggering a class action lawsuit that settled for $275,000.
What Is the Generational Equity Data Breach?
The Generational Equity data breach stands as one of the more consequential cybersecurity incidents in the M&A advisory sector because of the extraordinary sensitivity of the data involved. Unlike a retail breach that exposes credit card numbers, Generational Equity held complete financial profiles of business owners: tax returns, payroll records, Social Security numbers, bank statements, and proprietary business valuation documents. When unauthorized actors accessed those systems in February 2023, the exposure was both personal and corporate.
The breach was detected on February 16, 2023 — one day after the intrusion began — and the company immediately engaged forensic cybersecurity specialists to investigate and contain the damage. However, the investigation took months. Affected individuals did not receive breach notification letters until late 2023, creating a gap of approximately eight months during which their data may have been in unauthorized hands.
Detailed Timeline of the Generational Equity Breach
| Date | Event |
| February 15, 2023 | Unauthorized third-party actors first accessed Generational Equity systems |
| February 16, 2023 | Suspicious activity detected; forensic investigation launched immediately |
| Spring-Summer 2023 | Forensic specialists confirm PII was accessed and potentially exfiltrated |
| Late 2023 (Oct/Nov) | Data breach notification letters issued to 2,200+ affected individuals |
| Late 2023 – Early 2024 | Glass v. Generational Equity class action filed in Dallas County, Texas |
| August 2024 | Generational Equity agrees to $275,000 settlement; preliminary court approval granted |
| November 3, 2024 | Deadline for class members to opt out or object to settlement |
| December 3, 2024 | Claims submission deadline for affected individuals |
| December 6, 2024 | Final approval hearing scheduled in Dallas County, Texas |
What Data Was Exposed in the Generational Equity Breach?
The breach potentially compromised the following categories of personal and financial information, which M&A clients had entrusted to the firm as part of the business sale process:
- Full legal names and contact information (addresses, phone numbers, email)
- Social Security numbers (SSNs)
- Federal and state income tax returns
- Payroll records and employee data
- Bank account numbers and financial account details
- Driver’s license numbers
- Proprietary business documents, trade secrets, and financial statements
- Business valuations and confidential deal documents
| Why This Breach Was More Serious Than Most Unlike typical consumer data breaches, the Generational Equity breach exposed M&A advisory data — which includes not just personal identifiers but entire business financial profiles. This creates elevated risks for both personal identity theft and corporate espionage. Business owners who shared their most sensitive documents to facilitate a sale now faced the possibility that competitors or bad actors had access to those same records. |
Who Was Affected by the Generational Equity Data Breach?
The breach affected approximately 2,200+ individuals — primarily small and mid-sized business owners who were active Generational Equity clients, along with their employees and associates whose personal information was contained in client files. If you received an official data breach notification letter from Generational Equity LLC in late 2023, your data was confirmed to be in their systems at the time of the incident.
What Should Affected Individuals Do Right Now?
- Place a credit freeze with all three bureaus: Equifax, Experian, and TransUnion — this is free and the most effective protection against identity theft.
- Request your free credit reports at annualcreditreport.com to check for unauthorized accounts.
- Enroll in identity theft monitoring — the settlement offered two years of free monitoring to class members.
- Preserve your breach notification letter and all records of any out-of-pocket expenses related to the breach.
- Consult a data breach attorney if you experienced documented financial harm, as individual claims may still be available outside the class settlement.
