Fidelity Digital Assets Data Theft Claims on Dark Web
Article Content
- •Threat actor claims to have stolen 288.8 GB of data from Fidelity Digital Assets.
- •Data includes sensitive client onboarding and trading records, potentially valuable for scams.
- •Fidelity has not confirmed any breach, and claims remain unverified.
A threat actor on a dark web forum claims to have stolen 288.8 GB of data from Fidelity Digital Assets, including sensitive client information and institutional trading records. The actor is offering this data for sale, which reportedly includes client onboarding information and regulatory documents. Fidelity has not confirmed any breach, and the claims remain unverified. Separately, another leak claims to involve a database of Fidelity International customers in Taiwan, containing personal details and investment fund holdings. This data could be exploited for identity fraud and investment scams. Both incidents highlight potential vulnerabilities in Fidelity's data security practices, but no confirmation of a breach has been provided by the company.
Ask AI about this cluster
Answers cite the sources they use
Timeline
More articles in this cluster (2)
Following this threat?
Track Fidelity Digital Assets in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.
Free account · no card needed
Common questions
Is there confirmation of a data breach?
What type of data is reportedly stolen?
What should clients do to protect themselves?
Continue Reading
Critical Zero-Day Exploited in BeyondTrust Remote Support by China-linked Group A critical vulnerability in BeyondTrust Remote Support, tracked as CVE-2026-102764 with a CVSS score of 9.3, has been exploited by the China-linked espionage group Armory Castle since August 29, 2026. This flaw allows unauthenticated remote attackers to perform file operations, gaining root control and access to…
Silent Lynx Targets CIS Governments via WinRAR Exploit The threat actor Silent Lynx has launched a series of attacks against government organizations in the Commonwealth of Independent States (CIS) from June 2025 to August 2026. These attacks exploit a vulnerability in WinRAR (CVE-2025-8088) to deploy reverse shells, including FoalShell and PickleShell, facilitating…