Skip to content
OFX Cybersecurity Incident: Unauthorized Data Access Confirmed

OFX Cybersecurity Incident: Unauthorized Data Access Confirmed

First seen 21 Oct 2026, 21:09 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •October 21, 2026 at 22:11 UTC
  • •Unauthorized access to OFX data confirmed, but client databases remain secure.
  • •No unauthorized access to client accounts or funds reported.
  • •Investigation ongoing; specific data types affected not yet disclosed.

OFX Group Ltd. reported a cybersecurity incident involving unauthorized access to certain company data, discovered on September 28, 2026. The breach notification was filed by USForex Inc., OFX's U.S. subsidiary. OFX's investigation revealed that while unauthorized access occurred, databases supporting client platforms were not accessed, and no client accounts or funds were compromised. The affected data includes information from clients and individuals who interacted with OFX, such as job applicants. The specific types of personal information exposed have not been disclosed, and the investigation is ongoing. OFX has been in contact with affected clients and has implemented increased monitoring of client accounts. The breach was reported to the New Hampshire Attorney General on October 13, 2026.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-09-28
Unauthorized access discovered
OFX identified unauthorized access to certain company data, prompting an investigation.
Claimdepot
2026-10-01
Regulatory reporting initiated
OFX determined the incident met regulatory reporting thresholds and began notifying relevant bodies.
Claimdepot
2026-10-13
Breach reported to Attorney General
OFX reported the data breach to the New Hampshire Attorney General.
Claimdepot

More articles in this cluster (2)

Following this threat?

Track OFX in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2

Common questions

What types of data were affected?
The specific types of personal information exposed have not yet been disclosed.
Are client accounts secure?
Yes, OFX has confirmed there was no unauthorized access to client accounts or funds.
What should affected clients do?
Affected clients should monitor their accounts and follow any guidance provided directly by OFX.