DriveWealth Discloses 2026 Data Breach Impacting Over 62,000 Rhode Island Residents
DriveWealth LLC, a fintech firm providing brokerage infrastructure to global financial institutions, reported a data breach that exposed the personal information of approximately 62,074 Rhode Island residents. The incident, disclosed to the California Attorney General on September 30, 2026, involved unauthorized network access between September 4 and 5, 2026, which the company contained the same day.
An internal investigation concluded on September 28, 2026, confirming that full names and other personal data were exfiltrated. The breach follows an unrelated or potentially linked claim by the threat actor "Yiqun data," who alleged in December 2025 to have stolen 72,000 DriveWealth customer records, including names, emails, and phone numbers, via a Telegram post.
As part of its response, DriveWealth is offering affected individuals 12 months of complimentary Triple Bureau credit monitoring, requiring enrollment within 90 days of notification. The company has established a dedicated toll-free response line and an online cyber response page for further assistance. The connection between the 2025 and 2026 incidents remains unconfirmed.
Source: https://www.claimdepot.com/data-breach/drivewealth-2026
DriveWealth LLC TPRM report: https://www.rankiteo.com/company/drivewealth
"id": "dri1790893904",
"linkid": "drivewealth",
"type": "Breach",
"date": "10/2026",
"severity": "85",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'customers_affected': '62074',
'industry': 'Financial Services',
'location': 'Global (Primary impact: Rhode Island, '
'USA)',
'name': 'DriveWealth LLC',
'type': 'Fintech Firm'}],
'attack_vector': 'Unauthorized Network Access',
'customer_advisories': 'Enrollment in credit monitoring required within 90 '
'days of notification',
'data_breach': {'data_exfiltration': 'Yes',
'number_of_records_exposed': '62074',
'personally_identifiable_information': 'Full names, and '
'potentially other '
'personal data',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personal Information'},
'date_detected': '2026-09-05',
'date_publicly_disclosed': '2026-09-30',
'date_resolved': '2026-09-05',
'description': 'DriveWealth LLC, a fintech firm providing brokerage '
'infrastructure to global financial institutions, reported a '
'data breach that exposed the personal information of '
'approximately 62,074 Rhode Island residents. The incident '
'involved unauthorized network access between September 4 and '
'5, 2026, which the company contained the same day. An '
'internal investigation confirmed that full names and other '
'personal data were exfiltrated.',
'impact': {'data_compromised': 'Personal information including full names',
'identity_theft_risk': 'High'},
'initial_access_broker': {'data_sold_on_dark_web': 'Alleged in December 2025 '
'(72,000 records including '
'names, emails, and phone '
'numbers)'},
'investigation_status': 'Completed (Internal investigation concluded on '
'2026-09-28)',
'recommendations': 'Offering 12 months of complimentary Triple Bureau credit '
'monitoring to affected individuals',
'references': [{'source': 'California Attorney General'}],
'regulatory_compliance': {'regulatory_notifications': 'Disclosed to the '
'California Attorney '
'General'},
'response': {'communication_strategy': 'Dedicated toll-free response line and '
'online cyber response page',
'containment_measures': 'Contained on the same day (2026-09-05)',
'incident_response_plan_activated': 'Yes'},
'threat_actor': 'Yiqun data',
'title': 'DriveWealth Data Breach Impacting Over 62,000 Rhode Island '
'Residents',
'type': 'Data Breach'}