Skip to content
Breach Index · running record

Jefferies data breach history (2016-2026): no confirmed breach, a hijacked CEO account and a name mix-up

Jefferies Financial Group, the US investment bank, has not disclosed a data breach in the last ten years in the sources we read. The one confirmed security incident is the 2022 takeover of its CEO’s Instagram account. Searches for a “Jefferies data breach” also turn up Jeffries Morris, an unrelated New York company. This page sets out what we found and what we did not.

Short answer

Was Jefferies hacked?

We found no confirmed breach of Jefferies’s own systems from 2016 to 2026 in the sources we read. We found no Jefferies 8-K reporting a material cybersecurity incident and no state attorney general breach notice from Jefferies.

In May 2022 Jefferies said the Instagram account of CEO Rich Handler had been hacked and that posts about “discounted sales of shares, crypto donations or donations to Ukraine” were “categorically false”, per teiss. It worked with Meta to regain control. That was a social-media account takeover, not a breach of client or company data.

A 2023 breach notice from “Jeffries Morris, Inc.” is from a different company. Jefferies was not named in the coverage we read of the SitusAMC, Fried Frank or Chain IQ vendor breaches.

Timeline at a glance

  1. Nov 2025 – Jan 2026Not named in coverage of the SitusAMC or Fried Frank vendor breaches. (Bank Info Security)Not a breach
  2. 11 May 2023Breach notice from Jeffries Morris, Inc., a different company, not Jefferies. (Vermont AG)Not a breach
  3. 6 May 2022Jefferies says CEO Rich Handler’s Instagram account was hacked; scam posts false. (teiss)Confirmed

Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.

Jefferies incident timeline, in detail

Confirmed = acknowledged by Jefferies, a regulator filing or a court. Reported = credible reporting Jefferies has not fully confirmed. Unverified claim = an attacker or leak-site claim.

May 2022ConfirmedSocial media account takeover

CEO Rich Handler’s Instagram account hijacked

What happened. Jefferies said the Instagram account of its CEO, Rich Handler, had been hacked. It said posts on the account about “discounted sales of shares, crypto donations or donations to Ukraine” were “categorically false” and that it was working with Meta, Instagram’s owner, to regain control.

Impact. Risk of followers being scammed through fake share or crypto offers. No client, employee or company data was reported as affected.

Sources: teiss, 9 May 2022

Jan – May 2023Not a breachName confusion

Jeffries Morris breach notice is not Jefferies

What happened. Jeffries Morris, Inc. sent breach notices in May 2023 (filed with Vermont’s attorney general) saying there had been unauthorised access to its network on or about 20 January 2023. Breach-tracker pages sometimes list it under Jefferies. It is a different company with a different spelling.

Impact. None for Jefferies Financial Group clients.

Sources: Jeffries Morris notice, Vermont AG, 11 May 2023

Where the reports disagree

  • Some breach-tracker and law-firm pages describe Jeffries Morris as a Jefferies subsidiary. The notice itself is from Jeffries Morris, Inc., and we found nothing tying it to Jefferies Financial Group.

The pattern across the record

Impersonation, not intrusion, is the visible risk

The only confirmed incident is a hijacked executive social account used to push fake offers. Fraudsters reuse well-known bank names; check before trusting a post or a site.

Absence of disclosure is not proof of absence

Jefferies’s clients’ data also sits with law firms, deal-data rooms and loan servicers. Vendor breaches at those firms often name only the largest banks publicly.

What it means for Jefferies clients — and what to do

There is no Jefferies breach to act on. The practical risk for clients and the public is impersonation of Jefferies and its executives.

  1. 1.Do not act on offers from executives’ social accounts

    Discounted shares or crypto giveaways from a bank CEO’s account are scams. Contact Jefferies through its official site.

  2. 2.Verify payment instructions by phone

    Call a known number before acting on any email that changes wiring details for a deal or account.

    Invoice fraud and BEC lab
  3. 3.Ask your advisers about their vendors

    Law firms and data rooms holding your deal documents have been breached. Ask how they would tell you.

    Vendor risk scorecard

CISO takeaways

Protect executive accounts

Executives’ social accounts are part of the attack surface. Use phishing-resistant MFA and a takedown plan.

Phishing-resistant MFA planner
Prepare for a law-firm or vendor breach

Your deal data sits with advisers. Rehearse the call when one of them is hit.

Vendor Breach Lab
Have a third-party intake ready

Know what to ask a vendor in the first hours after it reports an incident.

Third-party breach checklist

Sources

Company statements and regulator filings first, then reputable reporting. Reviewed November 13, 2026.

  1. 1.Jefferies says CEO Handler’s Instagram account hacked — teiss, 9 May 2022
  2. 2.Jeffries Morris data breach notice to consumers — Vermont Attorney General, 11 May 2023
  3. 3.Major US banks gauge their exposure to SitusAMC breach — Bank Info Security, 24 Nov 2025
  4. 4.After Goldman, JPMorgan discloses law firm data breach — SecurityWeek, 13 Jan 2026
  5. 5.Chain IQ, UBS data stolen in ransomware attack — SecurityWeek, 19 Jun 2025

Frequently asked questions

Was Jefferies hacked?

We found no confirmed breach of Jefferies’s own systems from 2016 to 2026. The only confirmed incident is the May 2022 hijacking of CEO Rich Handler’s Instagram account.

Is there a Jefferies data breach in 2025 or 2026?

Not that we found. Jefferies was not named in the coverage we read of the 2025 SitusAMC, Fried Frank or Chain IQ vendor breaches, and we found no Jefferies breach notice.

Is the Jeffries Morris data breach the same as Jefferies?

No. Jeffries Morris, Inc. is a different company with a different spelling. Its 2023 notice described unauthorised access to its own network in January 2023.

Was Rich Handler’s Instagram hacked?

Yes. Jefferies said in May 2022 that his account was hacked and that posts about discounted shares, crypto donations or donations to Ukraine were false.

More in the Breach Index

Same sourced, verification-tagged timeline, company by company — compare how peers have fared.

Coinbase data breachFinancial services

Bribed support agents, 69,461 customers, an 8-K.

TransUnion data breachFinancial services

4.4M people via a third-party support app (2025).

Apollo Global Management data breachFinancial services

Social engineering and cloud platforms.

Invesco data breachFinancial services

No confirmed breach; 2024 vendor ransomware in Japan

Or see the full Breach Index and how to read it.

Independent analysis for security-leadership education; not affiliated with or endorsed by Jefferies. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.