Is Your Email in the Mercer Advisors Data Breach? 679,319 Records

HEROIC analysts logged a data breach at Mercer Advisors, dated February 16, 2026, that exposed 679,319 records. The records list email addresses, first and last names, phone numbers, birthdays and Social Security numbers. The only way to know whether yours is one of them is to scan your email.

What Someone Can Do With a Social Security Number and a Birthday

A Social Security number paired with a full name and a birthday is the core of most identity checks. Anyone holding all three can apply for credit, file a false tax return or answer security questions at a bank or phone carrier. Unlike a password, a Social Security number and a birthday cannot be changed after a leak, so the exposure stays relevant long after the breach itself.

Six Details in Each Record

• Email addresses: the channel for phishing messages that quote the rest of the record.
• First names: they let a scammer greet you correctly.
• Last names: together with a first name and an email, they support impersonation.
• Phone numbers: a target for scam calls and texts, and for attempts to take over a phone line.
• Social Security numbers: the key to identity theft and fraudulent credit applications.
• Birthdays: a standard identity check that cannot be reset.

Fraud That Starts Without a Password

No passwords appear in the record, so this is not mainly a sign-in problem. The danger is impersonation: new credit opened in your name, refunds or benefits claimed by someone else, or a call that sounds informed because the caller already knows your birthday and phone number.

How a Database Breach Happens

A database breach means records were taken from one organization's own systems rather than from individual devices. Whoever gets in can copy a whole table of client details in one pass. Once copied, the details can be used without the people they describe ever knowing, which is why checking your own email matters.

Should You Freeze Your Credit After This Breach?

Start with the check: scan your email and see your information. Because Social Security numbers are listed, freeze your credit with each credit bureau and watch your credit reports for entries you do not recognize. Treat scam calls and texts that use your phone number with caution, and ask your phone carrier to add a PIN to your line.

Whether you check a personal inbox or an address from the office, the scan treats both the same way.