Janney Montgomery Scott clients notified that their Social Security or tax ID numbers and financial account numbers were exposed in an August 2026 breach at data software vendor Alation may be covered by a proposed class action alleging Alation and Janney failed to protect that information. No class has been certified and there is nothing to file yet.
Allegations Only · No Settlement Yet
This article describes a class action complaint. The statements below are unproven allegations. Alation and Janney Montgomery Scott have not been found liable, there is no certified class, and nothing to claim at this time. This page is informational and is not legal advice.
What Is This About?
A proposed class action filed November 3, 2026 alleges that Janney Montgomery Scott LLC, a Philadelphia-based wealth management and financial advisory firm, and Alation, Inc., a Redwood City, California data catalog and data governance software company that worked for Janney, failed to protect Janney clients’ personal and financial information. The case, Lewis v. Alation, Inc., No. 3:26-cv-13068, is in the U.S. District Court for the Northern District of California.According to the complaint, which relies on Janney’s report to Massachusetts regulators, an unknown actor gained access to Alation’s network systems on August 10, 2026. Alation notified Janney on or about September 1, 2026, and Janney began sending notice letters to affected clients in October 2026. The complaint does not say how many people were affected. Neither company has responded in court.
Free settlement alerts
Get notified when new class actions open to claims
Join thousands of readers who get the latest class action settlements you may qualify for — delivered straight to your inbox.
What Information Was Exposed?
The complaint says the exposed information includes clients’ names, physical addresses, Social Security numbers or tax identification numbers, and financial account numbers. It alleges that Janney required clients to provide this information to receive its services and shared it with Alation as part of the data services Alation provided.The plaintiff, an Alabama resident and Janney client, says she was notified of the breach by email, has spent time dealing with it and has seen an increase in spam and suspicious calls, emails and texts since then.
What Does the Lawsuit Allege?
The complaint alleges that Alation did not maintain adequate security on its systems or detect the intrusion promptly, and that Janney did not adequately vet Alation’s security, supervise how it handled client data or delete information it no longer needed to keep. It also alleges the companies did not notify clients promptly. These are allegations; the court has not decided whether any of them are true.It brings five claims on behalf of a nationwide class:
- Negligence and negligence per se, against both companies;
- Breach of implied contract and, in the alternative, unjust enrichment, against Janney only; and
- Declaratory judgment, against both companies, asking the court to require specific security measures.
Who Could Be Covered?
The proposed class is all citizens and residents of the United States whose private information was impacted in the data breach. Alation, Janney and their affiliates, officers and directors are excluded. A court has not certified the class.What Is the Plaintiff Asking For?
The lawsuit seeks actual, nominal, statutory, consequential and punitive damages, restitution, and court orders requiring both companies to improve their data security, vet the vendors they share data with and delete information they no longer need, along with attorneys’ fees and a jury trial. The case was filed by Kopelowitz Ostrow P.A. and Milberg, PLLC.What Happens Next?
Alation and Janney will have a chance to respond to the complaint, which could include motions to dismiss. More suits may follow, including from clients of other companies that used Alation if they were affected. If the case settles or the plaintiff wins after class certification, class members would generally be identified from the companies’ records and sent notice, and OpenClassActions.com will cover it.Questions
What happened in the Janney Montgomery Scott data breach?
According to the complaint, which cites Janney's report to Massachusetts regulators, an unknown actor gained access to the network of Alation, Inc., a data software company Janney used, on August 10, 2026. Alation told Janney about the incident on or about September 1, 2026, and Janney began sending notice letters to affected clients in October 2026.
What information was exposed?
The complaint says the exposed information includes names, physical addresses, Social Security numbers or tax identification numbers, and financial account numbers of Janney clients.
Why are both Janney and Alation being sued?
The complaint alleges Alation failed to secure the systems that were breached and that Janney failed to vet and oversee Alation before sharing client data with it. Both are named in the negligence claims; the breach of implied contract and unjust enrichment claims are brought against Janney only.
Is there a Janney data breach settlement?
No. The lawsuit was filed on November 3, 2026. There is no settlement, settlement fund or claim form, and neither company has responded in court.
Sources
• Docket, Lewis v. Alation, Inc., No. 3:26-cv-13068 (N.D. Cal., filed November 3, 2026), via CourtListener• Janney Montgomery Scott LLC data breach notice, Massachusetts Office of Consumer Affairs and Business Regulation (report 2026-1874)
