DriveWealth breach: brokerage customer data taken in two-day intrusion
An unauthorised party accessed DriveWealth's network on September 4–5, 2026 and exfiltrated personal information of people for whom it had opened brokerage accounts.
What happened
DriveWealth, the brokerage provider behind several investing apps, said an unauthorised party accessed its network on September 4–5, 2026 and exfiltrated personal information of people for whom it had opened brokerage accounts. The company says it contained the compromise on September 5, found no unauthorised trading, transfers or withdrawals, and its production trading systems were not affected.
Who is affected
It varies by customer. DriveWealth's California notice confirms names and further customer-specific information were taken; its Texas Attorney General filing lists names, Social Security numbers and financial information, and puts affected Texans at over 2.5 million. DriveWealth says passwords and payment details such as card or bank account numbers were not compromised.
How serious
Names, Social Security numbers and financial information together create a concrete identity-fraud risk: that combination can be used to impersonate you to financial services. The same details also support targeted phishing that references your investing app or balances. DriveWealth says passwords and payment details such as card or bank account numbers were not compromised, and it found no unauthorised trading, transfers or withdrawals.
What to do now
If you receive a DriveWealth notice, follow it — enrol in the monitoring offered and stay alert for scam emails or messages that reference your investing app or balances. Never share passwords or verification codes; contact your platform through its official app instead.
Source: California Attorney General breach list — DriveWealth filing, reported September 30, 2026