OFX Data Breach: Incident Under Investigation

OFX Group Ltd., an Australia-based global financial services company that provides international money transfers, foreign exchange and payment solutions for individuals and businesses, disclosed a cybersecurity incident involving unauthorized access to certain company data.

The breach notification was filed by USForex Inc., OFX's U.S. subsidiary and a licensed money transmitter based at 49 Stevenson St. in San Francisco.

The incident involved unauthorized access to certain OFX data. Upon discovering the incident on Sept. 28, 2026, the company's IT and security teams began an investigation and implemented containment and security measures to address the unauthorized access.

Over the following days, OFX continued to investigate the nature and scope of the incident, including what data may have been affected. On Oct. 1, 2026, the company determined that the incident met applicable regulatory reporting thresholds. OFX then began sending notifications to relevant regulatory and supervisory bodies.

The specific types of personal information exposed have not yet been identified as the incident remains ongoing. The incident could affect customers who have used OFX for financial transactions as well as people who submitted personal information as part of a job application.

The breach was reported to the New Hampshire Attorney General on Oct. 13, 2026. The company also posted a notice about the incident on its website.

OFX's response to the breach

Because the investigation is still in its early stages, many details about the full scope of the breach have not yet been determined. Individuals with questions about the incident can contact OFX's customer service team at 1-415-449-1379 or by email at customer.service@ofx.com.