DriveWealth Data Breach Affects 62,074: PII Exposed

DriveWealth LLC, a financial technology company that provides brokerage infrastructure for banks, broker-dealers and other financial institutions worldwide, disclosed a data breach that occurred in September 2026.

The breach was disclosed to the California Attorney General on Sept. 30, 2026. According to the company's notification to consumers, approximately 62,074 Rhode Island residents were impacted by the incident.

DriveWealth discovered unauthorized access to its network that occurred between Sept. 4, 2026, and Sept. 5, 2026. The company stated that it contained the compromise on Sept. 5, 2026.

The company's investigation and document review concluded on Sept. 28, 2026. Based on those findings, the company confirmed that full names and other personal information was exfiltrated from its network.

Separately, on Dec. 25, 2025, a threat actor known as "Yiqun data" posted a claim on Telegram alleging it had obtained 72,000 customer records from DriveWealth. The claimed data reportedly included names, email addresses, phone numbers and other personally identifiable details.

It remains unclear if the two incidents are linked.

DriveWealth's response to the breach

DriveWealth is offering affected individuals 12 months of complimentary Triple Bureau credit monitoring and credit report services.

Affected individuals must enroll within 90 days of receiving their notification letter using the unique code provided in the letter. Enrollment requires an internet connection and an email account.

DriveWealth has set up a dedicated toll-free response line that is available Monday through Friday, 8 a.m. to 8 p.m. ET, excluding holidays. Affected individuals can also reach the company by email or visit its cyber response page for additional information.