US Tiger Securities Data Breach Exposes Sensitive Customer Information
Between July 8 and 9, 2025, US Tiger Securities operating as Tiger Brokers suffered a cybersecurity breach in its virtual back-office environment, which also supports its affiliate, TradeUP. An unauthorized third party encrypted files and exfiltrated data before the intrusion was detected on July 10, 2025.
After a lengthy investigation concluded on April 17, 2026, the firm began notifying affected individuals. Compromised data includes names, Social Security numbers, driver’s license and government-issued ID numbers, medical records, and health insurance details. The breach impacts customers of both US Tiger Securities and TradeUP.
Legal professionals are now reviewing the incident to determine whether a class action lawsuit can be filed on behalf of those affected. The case could seek compensation for privacy violations, financial losses, and other damages resulting from the breach. US Tiger Securities has not disclosed the total number of individuals impacted.
Source: https://www.classaction.org/data-breach-lawsuits/us-tiger-securities-may-2026
US Tiger Securities, Inc. cybersecurity rating report: https://www.rankiteo.com/company/ustigersecurities
TradeUP Securities Inc. cybersecurity rating report: https://www.rankiteo.com/company/tradeup-securities-inc
"id": "USTTRA1778927199",
"linkid": "ustigersecurities, tradeup-securities-inc",
"type": "Ransomware",
"date": "7/2025",
"severity": "100",
"impact": "4",
"explanation": "Attack with significant impact with customers data leaks"{'affected_entities': [{'industry': 'Brokerage, Investment',
'location': 'United States',
'name': 'US Tiger Securities (Tiger Brokers)',
'type': 'Financial Services'},
{'industry': 'Brokerage, Investment',
'location': 'United States',
'name': 'TradeUP',
'type': 'Financial Services'}],
'customer_advisories': 'Notifications sent to affected individuals',
'data_breach': {'data_encryption': 'Yes (files encrypted by threat actor)',
'data_exfiltration': 'Yes',
'personally_identifiable_information': 'Names, Social '
'Security numbers, '
'driver’s license and '
'government-issued ID '
'numbers',
'sensitivity_of_data': 'High',
'type_of_data_compromised': 'Personally Identifiable '
'Information (PII), Medical '
'Records, Health Insurance '
'Details'},
'date_detected': '2025-07-10',
'date_resolved': '2026-04-17',
'description': 'Between July 8 and 9, 2025, US Tiger Securities operating as '
'Tiger Brokers suffered a cybersecurity breach in its virtual '
'back-office environment, which also supports its affiliate, '
'TradeUP. An unauthorized third party encrypted files and '
'exfiltrated data before the intrusion was detected on July '
'10, 2025. After a lengthy investigation concluded on April '
'17, 2026, the firm began notifying affected individuals. '
'Compromised data includes names, Social Security numbers, '
'driver’s license and government-issued ID numbers, medical '
'records, and health insurance details. The breach impacts '
'customers of both US Tiger Securities and TradeUP.',
'impact': {'data_compromised': 'Names, Social Security numbers, driver’s '
'license and government-issued ID numbers, '
'medical records, health insurance details',
'identity_theft_risk': 'High',
'legal_liabilities': 'Potential class action lawsuit for privacy '
'violations, financial losses, and other '
'damages',
'systems_affected': 'Virtual back-office environment'},
'investigation_status': 'Concluded',
'ransomware': {'data_encryption': 'Yes', 'data_exfiltration': 'Yes'},
'regulatory_compliance': {'legal_actions': 'Potential class action lawsuit '
'under review'},
'response': {'communication_strategy': 'Notified affected individuals '
'post-investigation'},
'title': 'US Tiger Securities Data Breach Exposes Sensitive Customer '
'Information',
'type': 'Data Breach, Ransomware'}