Evercore data breach history (2016-2026): the reported 2018 London phishing attack and what Evercore discloses
Evercore is an independent investment bank advising on mergers, restructurings and capital markets. Advisory firms hold deal information rather than consumer data, so a breach would show up as leaked deal files, not customer letters. This page lists what we could source from November 2016 to November 2026.
Short answer
Was Evercore hacked?
We found no confirmed breach of Evercore’s own systems from 2016 to 2026 in the sources we read. In December 2018 The Times reported that a junior administrator in Evercore’s London office fell for a phishing email and attackers took about 160,000 “data objects” such as calendar invitations, documents and emails from her inbox (via search; we could not open the report). Evercore did not confirm it publicly; a source close to the firm called it “just one of those things in business that many people are experiencing.”
Evercore’s annual reports for 2024 and 2025 say it is “not aware of any cyber incidents that, individually or in the aggregate, have been material to our operations or financial condition,” and it filed no material-incident 8-K. We found no state breach notice or regulator action, and Evercore was not named in the SitusAMC, Fried Frank, Infosys McCamish or Chain IQ vendor incidents.
Timeline at a glance
20 Feb 2026FY2025 10-K: not aware of any material cyber incidents. (SEC 10-K)Not a breach
21 Feb 2025FY2024 10-K: not aware of any material cyber incidents. (SEC 10-K)Not a breach
Dec 2018The Times: phishing of a London administrator; ~160,000 emails and files taken (via search). (The Times via DataBreaches.net)Reported
Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Evercore incident timeline, in detail
Confirmed = acknowledged by Evercore, a regulator filing or a court. Reported = credible reporting Evercore has not fully confirmed. Unverified claim = an attacker or leak-site claim.
Feb 2025 – Feb 2026Not a breachSEC disclosure
Annual reports disclose no material cyber incident
What happened. In Item 1C of its 10-Ks for 2024 (filed 21 February 2025) and 2025 (filed 20 February 2026), Evercore says it is “not aware of any cyber incidents that, individually or in the aggregate, have been material to our operations or financial condition.” Its risk factors name phishing and email spoofing used to direct fraudulent transfers as a risk. EDGAR shows no Item 1.05 (material cybersecurity incident) 8-K.
Impact. A statement about materiality, not a guarantee that no incident occurred.
Reported phishing attack on Evercore’s London office (via search)
What happened. According to DataBreaches.net’s summary of a Times report (seen via search; both sites blocked our fetcher), a junior administrator in Evercore’s London office was phished and attackers gained access to her inbox. A source close to Evercore said: “We live in a world where these things are increasingly prevalent and it’s just one of those things in business that many people are experiencing.”
Impact. About 160,000 “data objects”, such as diary invitations, documents and emails, per the report. Whether confidential deal information was among them was speculation in commentary, not confirmed. We found no notice to individuals or regulator finding.
The 2018 incident rests on one newspaper report and an anonymous source; Evercore issued no public statement we could find. Its scale (160,000 data objects) is unverified by us.
The pattern across the record
Email is the asset and the attack path
For an advisory firm the sensitive data is in mailboxes and deal folders. The one reported incident was a single phished inbox, and Evercore’s own risk factors focus on phishing and spoofed payment requests.
Little public trail by design
Advisers hold little consumer data, so state breach-notice laws rarely trigger. Absence of notices is weak evidence either way; the 10-K materiality statement is the firm’s formal position.
What it means for Evercore clients — and what to do
Evercore’s clients are companies and boards. The realistic risk is deal information leaking from email, or a spoofed adviser email redirecting a payment.
1.Verify any change in payment instructions by phone
Advisers’ risk factors name spoofed email used to direct fraudulent transfers. Call a known number before wiring.
Evercore has not confirmed a breach. The Times reported in December 2018 that a phishing attack on a London administrator let attackers take about 160,000 emails, files and calendar items. Evercore’s 2024 and 2025 annual reports say it knows of no material cyber incident.
Did Evercore report a data breach in 2025 or 2026?+
We found none. Evercore filed no material-incident 8-K, and its 10-K filed in February 2026 says it is not aware of any material cyber incidents. We found no state breach notice.
Was Evercore affected by the Fried Frank or SitusAMC breaches?+
We found no reporting naming Evercore among firms affected by Fried Frank (2025), SitusAMC (2025), Infosys McCamish (2023) or Chain IQ (2025).
Is there an Evercore data breach settlement?+
We found no lawsuit or settlement over a data breach at Evercore.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Evercore. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.