Boston Capital Holdings Data Breach Investigation: Edelson Lechtzin LLP Probes Class Action Claims After Customer Data Is Exposed

National class action law firm offers free, confidential case evaluations to Boston Capital Holdings LP investors, tenants, partners, and others whose personal information may have been exposed in the reported data breach.

NEWTOWN, Pa., Sept. 22, 2026 /PRNewswire/ -- Edelson Lechtzin LLP, a national class action law firm, is investigating data privacy claims arising from a reported data breach at Boston Capital Holdings LP. Anyone who has received a data breach notice from Boston Capital Holdings, or who believes their personal information may have been exposed, can request a free case evaluation.

Boston Capital Holdings data breach — at a glance

• Company: Boston Capital Holdings LP, a privately held real estate investment and financial services firm headquartered in Boston, Massachusetts, focused on multifamily and affordable-housing investments, real estate financing, and tax-exempt bond operations across the United States.
• Reported: The company notified affected individuals of the incident by letter dated May 18, 2026, and reported the incident to state regulators.
• How it reportedly happened: According to public accounts, a sophisticated cyber actor gained unauthorized access to files by exploiting cloud services and may have acquired personal information. The ransomware group LeakNet has claimed responsibility, though Boston Capital and regulators have not confirmed the claim.
• When: The breach is reported to have occurred on or about January 16, 2026. The company reportedly began reviewing a claim of potential unauthorized access on February 12, 2026, and issued consumer notifications on May 18, 2026.
• Who may be affected: Approximately 16,000 individuals across multiple states.
• Status: Certain details of the incident, including its full scope and the attacker's identity, remain unconfirmed or have not been publicly detailed.
• Cost to you: Nothing. Click here for a free evaluation.

What Happened

According to public accounts, Boston Capital Holdings LP disclosed that a sophisticated cyber actor gained unauthorized access to files, reportedly by exploiting cloud services. Reports indicate the incident occurred on or about January 16, 2026, and that the company began reviewing a claim of potential unauthorized access on February 12, 2026.

The company's notification letter, dated May 18, 2026, describes the incident as involving a sophisticated cyber actor but does not name the attacker or characterize the incident as ransomware. Separately, the ransomware group LeakNet has claimed responsibility for the attack. That claim is an attacker-side allegation and has not been confirmed by Boston Capital or any regulator.

Important details — including the incident's true scope, the specific data involved for each individual, and the identity of the responsible party — have not been fully confirmed publicly.

What Personal Information May Be at Risk

Based on public accounts and regulatory filings, the information potentially involved varied by individual and may include:

• Names
• Social Security numbers
• Driver's license numbers
• Passport numbers
• Other government-issued identification numbers
• Financial account information (without access codes)

Firms that handle real estate and financial transactions maintain highly sensitive personal and financial information. Exposing Social Security numbers, passport numbers, and government identification, combined with financial account information, can increase the risk of identity theft, fraudulent account creation, tax fraud, and other misuse.

Who May Be Affected

The investigation focuses on Boston Capital Holdings investors, tenants, business partners, and others whose personal information the company maintained. Anyone who has received a data breach notification connected to this incident may face an increased risk of identity theft and fraud and is encouraged to come forward.

Your Legal Options

Edelson Lechtzin LLP is investigating a potential class action to pursue legal remedies on behalf of individuals whose sensitive personal data may have been compromised in the reported breach. A successful case could recover compensation for losses such as lost time, out-of-pocket costs, and loss of privacy, and could push Boston Capital Holdings to strengthen how it protects personal information. The firm will evaluate your rights and potential claims at no cost.

Recommended Steps to Protect Yourself

• Review your account statements and credit reports regularly and stay alert for suspicious activity.
• Confirm whether your information was involved in the Boston Capital Holdings incident.
• Preserve any letters or emails you received about the breach.
• If credit monitoring was offered in your notice, consider enrolling before the stated deadline, and consider placing a fraud alert or security freeze with the three major credit bureaus.

Contact Us for a Free Case Evaluation

Speak confidentially with a data privacy attorney today: Marc Edelson, Esq., Edelson Lechtzin LLP, 411 S. State Street, Suite N-300, Newtown, PA 18940; Phone: 844-696-7492; Email: [email protected]; Web: www.edelson-law.com.

About Edelson Lechtzin LLP

Edelson Lechtzin LLP is a national class action law firm with offices in Pennsylvania and California. In addition to data breach litigation, the firm handles class and collective actions involving securities and investment fraud, federal antitrust violations, ERISA employee benefit plans, wage theft, and consumer fraud.

Media and Partnership Inquiries: Use the contact information above to connect with our team regarding interviews, co-counsel opportunities, and referral partnerships.

Legal Notice: This press release may be considered Attorney Advertising in some jurisdictions. Prior results do not guarantee a similar outcome. The reported data breach described above, and certain details concerning it, remain unconfirmed.

SOURCE Edelson Lechtzin LLP