SoFi Confirms Third-Party Data Breach at Hong Kong Subsidiary

On April 30, 2026, SoFi Securities (Hong Kong) Limited, a subsidiary of US-based financial technology company SoFi, detected unauthorized access to its database via one of its third-party vendors. The breach is believed to have occurred at the Hong Kong office of SoFi, which provides investment and securities services to customers in the region. SoFi has not disclosed how many customers were affected by the incident but warned them to remain vigilant for phishing attempts, suspicious communications, and unusual account activity. To mitigate the attack, security teams log 54% of successful attacks while alerting on just 14%, leaving a significant portion undetected.