Skip to content
ThreatCluster

Fidelity Digital Assets Data Theft Claims on Dark Web

First seen 21 Oct 2026, 15:41 UTC • •

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 17:09 UTC
  • •Threat actor claims to have stolen 288.8 GB of data from Fidelity Digital Assets.
  • •Data includes sensitive client onboarding and trading records, potentially valuable for scams.
  • •Fidelity has not confirmed any breach, and claims remain unverified.

A threat actor on a dark web forum claims to have stolen 288.8 GB of data from Fidelity Digital Assets, including sensitive client information and institutional trading records. The actor is offering this data for sale, which reportedly includes client onboarding information and regulatory documents. Fidelity has not confirmed any breach, and the claims remain unverified. Separately, another leak claims to involve a database of Fidelity International customers in Taiwan, containing personal details and investment fund holdings. This data could be exploited for identity fraud and investment scams. Both incidents highlight potential vulnerabilities in Fidelity's data security practices, but no confirmation of a breach has been provided by the company.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-10-20
Data theft claim posted on dark web
A threat actor claims to have stolen 288.8 GB of data from Fidelity Digital Assets and is offering it for sale.
Article 1
2026-10-21
Taiwan customer data leak claim
Another threat actor claims to have leaked a database of Fidelity International customers in Taiwan, including personal and investment data.
Article 2

More articles in this cluster (2)

Following this threat?

Track Fidelity Digital Assets in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Common questions

Is there confirmation of a data breach?
No, Fidelity has not confirmed any breach related to the claims made by the threat actor.
What type of data is reportedly stolen?
The claims include sensitive client onboarding information, trading records, and personal details of customers in Taiwan.
What should clients do to protect themselves?
Clients should be cautious of unexpected communications and verify any requests for personal information.