DriveWealth Data Breach: 2.5 Million Individuals Impacted

DriveWealth LLC, a financial technology company that provides brokerage infrastructure for banks, broker-dealers and other financial institutions worldwide, disclosed a data breach that occurred in September 2026.

At this time, 2,556,688 Texas residents and 62,074 Rhode Island residents were confirmed as impacted by the incident.

DriveWealth discovered unauthorized access to its network that occurred between Sept. 4, 2026, and Sept. 5, 2026. The company stated that it contained the compromise on Sept. 5, 2026.

The company's investigation and document review concluded on Sept. 28, 2026. Based on those findings, the company confirmed that full names, Social Security numbers and financial account information such as debit or credit cards numbers were exfiltrated from its network.

Separately, on Dec. 25, 2025, a threat actor known as "Yiqun data" posted a claim on Telegram alleging it had obtained 72,000 customer records from DriveWealth. The claimed data reportedly included names, email addresses, phone numbers and other personally identifiable details.

It remains unclear if the two incidents are linked.

The breach was disclosed to the attorneys general offices of California and Texas starting on Sept. 30, 2026.

DriveWealth's response to the breach

DriveWealth is offering affected individuals 12 months of complimentary Triple Bureau credit monitoring and credit report services.

Affected individuals must enroll within 90 days of receiving their notification letter using the unique code provided in the letter. Enrollment requires an internet connection and an email account.

DriveWealth has set up a dedicated toll-free response line that is available Monday through Friday, 8 a.m. to 8 p.m. ET, excluding holidays. Affected individuals can also reach the company by email or visit its cyber response page for additional information.