OFX Group Ltd. , an Australia-based global financial services company that provides international money transfers, foreign exchange and payment solutions for individuals and businesses, disclosed a cybersecurity incident involving unauthorized access to certain company data.
The breach notification was filed by USForex Inc., OFX's U.S. subsidiary and a licensed money transmitter based at 49 Stevenson St. in San Francisco.
The incident involved unauthorized access to certain OFX data. Upon discovering the incident on Sept. 28, 2026, the company's IT and security teams began an investigation and implemented containment and security measures to address the unauthorized access.
Over the following days, OFX continued to investigate the nature and scope of the incident, including what data may have been affected. On Oct. 1, 2026, the company determined that the incident met applicable regulatory reporting thresholds. OFX then began sending notifications to relevant regulatory and supervisory bodies.
The specific types of personal information exposed have not yet been identified as the incident remains ongoing. The incident could affect customers who have used OFX for financial transactions as well as people who submitted personal information as part of a job application.
The breach was reported to the New Hampshire Attorney General on Oct. 13, 2026. The company also posted a notice the incident on its website .
OFX's response to the breach
OFX's response to the breach
Because the investigation is still in its early stages, many details the full scope of the breach have not yet been determined. Individuals with questions the incident can OFX's customer service team at 1-415-449-1379 or by email at [email protected].
SUBMIT YOUR CLAIM TO THE LAW FIRM HANDLING THIS INVESTIGATION
Social Security Numbers
Affected information types not yet disclosed
The full story
This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.
