Legal: Court slaps advisor with $765K for raiding client list on his way out

A Delaware court ordered a departing financial advisor to pay $765,103 after he poached clients and walked out the door with trade secrets. 

The March 10, 2026 ruling in Dravo Bay LLC d/b/a Blue Rock Financial Group v. James Whalen, decided in the Court of Chancery of the State of Delaware, is one of those cases that reads like a cautionary tale you would share over coffee with a colleague who is thinking about making a move. 

Here is what happened. 

James Whalen joined the predecessor firm to Blue Rock Financial Group back in 2017. He could not come on as an advisor because his prior employer, Goldman Sachs, had terminated him for using a photocopied signature, and that showed up on his U5. The firm's broker-dealer at the time would not register him. So the founder, Todd Roselle, worked around it and brought Whalen on in an administrative role. 

Over the years, as the firm reorganized and the broker-dealer relationship ended, Whalen moved into an advisory capacity. He attended client meetings, eventually ran some on his own, and became a key part of a small team servicing about 300 households. The firm's retention rate hovered around 98 to 99 percent. Clients almost never left. 

But Whalen wanted more. He pushed for a partnership starting around 2021. Roselle never came through. By 2024, Whalen was not only passed over, he was demoted. Then Roselle told him partnership conversations were off the table because the firm was exploring a potential sale. For Whalen, who held no equity, the uncertainty was a driving factor in his decision to leave, along with family considerations. 

He quietly began interviewing with Cypress Financial Planning. During the process, he handed Cypress a spreadsheet listing client assets under management, revenue, and fee structures. He estimated the odds of each client following him to a new firm. The spreadsheet did not name clients, but Whalen admitted Cypress could connect some of the figures to client names through him. 

Cypress extended an offer in March 2024. Whalen waited almost a full year before accepting. 

On March 14, 2025, everything happened at once. Whalen emailed Roselle his resignation, effective immediately. He knew Roselle was in Europe for his daughter's senior trip. Within the same hour, his wife and mother-in-law mailed announcement cards to Blue Rock clients advertising his new position at Cypress. The cards had been designed on Canva and printed through FedEx the Sunday before. His mother-in-law addressed them using client information Whalen provided a day or two earlier. 

Whalen then called between 30 and 40 of the firm's clients. He later testified he wanted to reach as many as possible before the cease and desist arrived. It came four days later. 

The firm's internal investigation turned up more. Fifteen minutes before sending his resignation, Whalen had downloaded the firm's master password file, the one with credentials for every employee. He had also copied client files from the company's cloud storage to his personal Google Drive. 

About fifteen clients followed Whalen to Cypress. Every single one had been with Blue Rock for at least three years. Every single one left after receiving his announcement card. 

Blue Rock sued for breach of contract, trade secret misappropriation, and breach of fiduciary duty. Whalen filed a counterclaim for defamation over the U5 form Blue Rock filed after his departure, which disclosed the internal review and suggested confidential client information may have been shared with another firm. 

Senior Magistrate Molina ruled mostly in Blue Rock's favor. 

The court found Whalen violated his Confidentiality and Non-Solicitation Agreement on multiple fronts. He kept client contact information on his personal phone. He shared confidential financial data with a competitor. He used that data, through his family, to contact clients the day he walked out. 

Whalen argued the non-solicitation clause was unenforceable because it contained language suggesting the restriction could extend beyond three years. The court was not persuaded. The core three-year restriction was reasonable, the court said, and the questionable sentence could be separated from the rest of the provision. 

On trade secrets, the court found that client lists containing names, financial details, social security numbers, investment strategies, and fee structures clearly qualified. Blue Rock protected that information behind two-factor authentication, compliance training, employee handbook policies, and the confidentiality agreement itself. The argument that phone numbers and addresses are available through a Google search did not fly. The court pointed out that compiled client information, built up over years of business, is not the same thing as what anyone can find online. 

The fiduciary duty claim was tossed. The court said it was just the contract claim dressed up in different clothes. 

Whalen's defamation counterclaim did not survive either. The court found every statement in the U5 was substantially true. Blue Rock was running an internal review. The announcement cards were postmarked the same day as the resignation. And the suggestion that client data may have been shared was framed as an opinion, one that turned out to be correct. 

For damages, the court adopted the methodology of Blue Rock's expert, who had also valued the firm at $10.65 million for a potential acquisition by AssuredPartners. The expert calculated that the departing client households generated $179,265 in annual revenue, applied the firm's EBITDA margin, and multiplied by a market-based multiple. The result was $765,103 in lost enterprise value. 

On top of that, the court awarded attorneys' fees, costs, and interest. It also granted injunctive relief, ordering Whalen to return all confidential information, certify compliance under oath, and honor the full three-year non-solicitation period from scratch. 

One last thing worth noting. Whalen raised the Broker Protocol as a defense more than once during trial. It went nowhere. Neither Blue Rock nor Cypress was a member of the protocol, and the court made clear it does not override a valid non-solicitation agreement. 

If you are an advisor thinking about your next move, this case is worth reading closely. A signed agreement is not a suggestion. Client data belongs to the firm. And if you coordinate a mass solicitation on the way out, the consequences can run well into six figures, plus a fresh restriction period tacked on at the end.