DriveWealth Data Breach: What Affected Customers Should Know Featured
Customers of investment platforms may be affected by the exposure of personal information held by their brokerage provider.
If you invest through a U.S. financial app, you may have provided personal information to DriveWealth without recognizing its name. DriveWealth supplies brokerage services behind investment platforms and has disclosed a September 2026 data breach. If you are a U.S. resident who received a breach notice, or believe your information may have been involved, please complete the form on this page to request a review of your potential legal options.
What Happened in the DriveWealth Data Breach?
According to DriveWealth, unauthorized access to its network occurred between September 4 and September 5, 2026. A customer notice published by the California Attorney General says its investigation confirmed that personal information was taken. DriveWealth says it contained the compromise on September 5.
The company says its production brokerage and trading systems continued operating normally and that it identified no unauthorized trading, transfers, or withdrawals. However, the exposure of personal information raises concerns about phishing, impersonation, and possible identity theft.
What Information May Have Been Exposed?
The information involved varies by customer. The Houston Chronicle, reporting on a disclosure to the Texas Attorney General, identified names, Social Security numbers, and financial information among the reported categories.
DriveWealth’s California notification confirms that names and additional customer-specific information were taken, but the public sample redacts those additional categories. Your individual notice should identify what information was involved for you.
DriveWealth separately says passwords and financial payment information, such as credit card or bank account details, were not compromised. Do not assume that every affected customer had the same information exposed.
Which Investment Apps Are Connected to DriveWealth?
U.S. investment platforms with documented DriveWealth relationships include:
- Cash App Investing;
- MoneyLion;
- Revolut U.S. investment accounts;
- OnePay Invest;
- Step stock and ETF investing;
- Alinea Invest; and
- Acorns.
Cash App says it is transitioning its carrying broker relationship from DriveWealth to Apex. Revolut identifies DriveWealth as a provider for its U.S. investment service. A platform’s business relationship with DriveWealth does not establish that all its customers were affected. Check your breach notice and account statements for your specific connection.
Former customers should also review any notice they receive. DriveWealth may retain records after an account closes to meet regulatory requirements, so closing an account does not necessarily remove previously supplied information.
Why Should Customers Be Concerned?
Exposed contact details and investment information can make fraudulent messages appear convincing. Someone impersonating your provider may refer to genuine personal details to gain your trust. Be particularly cautious about urgent requests to move money, provide account credentials, or disclose verification codes.
What Should Affected Customers Do?
Keep your breach notice and related correspondence. Review account statements and credit reports, watch for unexpected messages requesting personal information, and enable multifactor authentication. If your Social Security number was exposed, consider a credit freeze. Record suspicious activity, expenses, and time spent responding to the breach.
Were You Affected by the DriveWealth Data Breach?
If you live in the United States and received a DriveWealth breach notice, or believe your information may have been compromised, please complete the form on this page. Tell us which investment platform you used, whether you received a notice, and any problems you experienced.
Your response can help attorneys evaluate your circumstances and potential legal options. You can submit the form even if you have not experienced fraud. There is no cost or obligation to submit the form. Please do not include Social Security numbers, passwords, or full financial account numbers.