Skip to content
Hatch investors warned personal data may be exposed in US cyber breach

Hatch investors warned personal data may be exposed in US cyber breach

1News.Co.Nz September 22, 2026

Kiwis who use the investment platform Hatch have been warned their personal information may have been exposed in a cybersecurity incident.

Kiwis who use the investment platform Hatch have been warned their personal information may have been exposed in a cybersecurity incident.

In an email to investors, the New Zealand platform said its US brokerage partner, DriveWealth, had been hit by the breach earlier this month.

In an email to investors, the New Zealand platform said its US brokerage partner, DriveWealth, had been hit by the breach earlier this month.

It said an unauthorised party accessed data held on DriveWealth's system on September 4 and 5. Some of the data related to customers who invested through Hatch.

It said an unauthorised party accessed data held on DriveWealth's system on September 4 and 5. Some of the data related to customers who invested through Hatch.

Hatch said the breach may have exposed investors' names, addresses, phone numbers, and email addresses. No passwords were compromised.

Hatch said the breach may have exposed investors' names, addresses, phone numbers, and email addresses. No passwords were compromised.

The breach may also have exposed investor profile information, such as income range and net asset range, as well as cash balance and portfolio value.

The breach may also have exposed investor profile information, such as income range and net asset range, as well as cash balance and portfolio value.

Hatch allows Kiwis to invest in US markets like the New York Stock Exchange and the Nasdaq. It uses DriveWealth as its US-regulated broker to access US markets.

Hatch allows Kiwis to invest in US markets like the New York Stock Exchange and the Nasdaq. It uses DriveWealth as its US-regulated broker to access US markets.

It said DriveWealth was "required to collect and store certain personal information so you can access and trade on exchanges such as the NYSE and NASDAQ".

It said DriveWealth was "required to collect and store certain personal information so you can access and trade on exchanges such as the NYSE and NASDAQ".

The company warned the information could be used to make fraudulent emails, text messages or phone calls more convincing.

The company warned the information could be used to make fraudulent emails, text messages or phone calls more convincing.

"We advise customers take extra care with unexpected Hatch, DriveWealth or their investments."

"We advise customers take extra care with unexpected Hatch, DriveWealth or their investments."

Some with closed Hatch accounts may have also had their information exposed, as US regulations required DriveWealth to retain certain information for a period of time.

Some with closed Hatch accounts may have also had their information exposed, as US regulations required DriveWealth to retain certain information for a period of time.

Investors were told their login details were not affected because that data was held in Hatch's own system, which was not compromised.

Investors were told their login details were not affected because that data was held in Hatch's own system, which was not compromised.

"DriveWealth is confident that no unauthorised transactions were made and your holdings were not affected by the incident.

"DriveWealth is confident that no unauthorised transactions were made and your holdings were not affected by the incident.

It said Hatch customers did not need to change their passwords because of the incident.

It said Hatch customers did not need to change their passwords because of the incident.

Hatch said DriveWealth had investigated the incident with the help of independent cybersecurity experts.

Hatch said DriveWealth had investigated the incident with the help of independent cybersecurity experts.

"It has advised us that it has not identified an ongoing threat to its systems and has strengthened its security controls following the incident.

"It has advised us that it has not identified an ongoing threat to its systems and has strengthened its security controls following the incident.

"We are continuing to work closely with DriveWealth as its investigation progresses and are engaging with the relevant authorities."

"We are continuing to work closely with DriveWealth as its investigation progresses and are engaging with the relevant authorities."

Hatch said it had notified police and the National Cyber Security Centre.

Hatch said it had notified police and the National Cyber Security Centre.

It urged investors never to passwords or two-factor authenticator codes, to be cautious unexpected or urgent requests, not to click links in suspicious messages, and to protect email accounts.

It urged investors never to passwords or two-factor authenticator codes, to be cautious unexpected or urgent requests, not to click links in suspicious messages, and to protect email accounts.

Kiwis targeted by scammers during big life moments

Criminals can target victims at any time but big life moments, where new surroundings and situations can make things tricky, are a particular risk.

Travel scams are getting harder to spot. Here's how to stay safe

Pickpockets were once the biggest worry for travellers heading to new destinations on vacation. But travel scams have become more sophisticated.

Health Minister briefed amid fears clinical trial files stolen

Health New Zealand said it's helping Zenith Technology, or ZenTech, respond to the incident and police are also investigating.

"If customers receive suspicious claiming to be from Hatch, or notice anything unexpected in your account, they should us."

"If customers receive suspicious claiming to be from Hatch, or notice anything unexpected in your account, they should us."

'Stop using': Extension cord recalled over risk it was wired backwards

"The extension lead may have been incorrectly wired during manufacture, with the wiring terminals connected in reverse," the retailer said.

'In the public interest': Gloriavale trust loses charitable status

The former leader of the isolated West Coast community is also barred from holding governance roles in other charities.

Each party has a supermarket fix - what if we combined the best ideas?

From restructuring to a national chain, how to drive supermarket competition up, and grocery prices down, has become an election battleground.

NZ aluminium sector warns cheap China imports risk local jobs

The Regional Development Minister says he wants to know "what the hell is going on?"

Te Pāti Māori pledges $3.1 billion plan for 'kai sovereignty' if elected

The party is promising tax credits, a Community Kai Fund and funding for Māori-owned supermarkets if elected.

National MPs don't like supermarket break-up policy - David Seymour

The ACT Party says National MPs have been coming to them "exasperated", but Christopher Luxon is pushing back.

Each party has a supermarket fix - what if we combined the best ideas?

From restructuring to a national chain, how to drive supermarket competition up, and grocery prices down, has become an election battleground.

NZ aluminium sector warns cheap China imports risk local jobs

The Regional Development Minister says he wants to know "what the hell is going on?"

Te Pāti Māori pledges $3.1 billion plan for 'kai sovereignty' if elected

The party is promising tax credits, a Community Kai Fund and funding for Māori-owned supermarkets if elected.

National MPs don't like supermarket break-up policy - David Seymour

The ACT Party says National MPs have been coming to them "exasperated", but Christopher Luxon is pushing back.

'Stop using': Extension cord recalled over risk it was wired backwards

"The extension lead may have been incorrectly wired during manufacture, with the wiring terminals connected in reverse," the retailer said.

'In the public interest': Gloriavale trust loses charitable status

The former leader of the isolated West Coast community is also barred from holding governance roles in other charities.

Each party has a supermarket fix - what if we combined the best ideas?

From restructuring to a national chain, how to drive supermarket competition up, and grocery prices down, has become an election battleground.

NZ aluminium sector warns cheap China imports risk local jobs

The Regional Development Minister says he wants to know "what the hell is going on?"

Te Pāti Māori pledges $3.1 billion plan for 'kai sovereignty' if elected

The party is promising tax credits, a Community Kai Fund and funding for Māori-owned supermarkets if elected.

National MPs don't like supermarket break-up policy - David Seymour

The ACT Party says National MPs have been coming to them "exasperated", but Christopher Luxon is pushing back.

'One of the strongest storms ever' off Mexico coast fuelled by El Niño

Funnel cloud off Taranaki, snow on alpine passes as cold sweeps in

Kidnapping charges for trio who posed as cops and detained youths

Ardie Savea has shoulder surgery, vows 'back soon' after Boks injury

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

'One of the strongest storms ever' off Mexico coast fuelled by El Niño

Funnel cloud off Taranaki, snow on alpine passes as cold sweeps in

Kidnapping charges for trio who posed as cops and detained youths

Ardie Savea has shoulder surgery, vows 'back soon' after Boks injury

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

Dame Jacinda Ardern and Clarke Gayford reportedly buy $6.5m Sydney

Trump threatens he may 'annihilate' Iran in UN general address

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

Education whistleblower claims OIA subversion not an isolated incident

'Bittersweet' win after decade-long fight over Gloriavale trust

'One of the strongest storms ever' off Mexico coast fuelled by El Niño

Funnel cloud off Taranaki, snow on alpine passes as cold sweeps in

Kidnapping charges for trio who posed as cops and detained youths

Ardie Savea has shoulder surgery, vows 'back soon' after Boks injury

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

'One of the strongest storms ever' off Mexico coast fuelled by El Niño

Funnel cloud off Taranaki, snow on alpine passes as cold sweeps in

Kidnapping charges for trio who posed as cops and detained youths

Ardie Savea has shoulder surgery, vows 'back soon' after Boks injury

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

'1000% wrong', 'hilarious': How Farrar reacted to Nicky Hager's new book

Dame Jacinda Ardern and Clarke Gayford reportedly buy $6.5m Sydney

Trump threatens he may 'annihilate' Iran in UN general address

F1: Liam Lawson's 'impressive' Red Bull stint comes to an end

Education whistleblower claims OIA subversion not an isolated incident

'Bittersweet' win after decade-long fight over Gloriavale trust

Extracted Entities

Attack Types (1)

Companies (2)

Countries (2)