SoFi Hong Kong discloses data breach tied to third-party vendor

SoFi Securities (Hong Kong) Limited, the Hong Kong-based investment and securities arm of U.S. financial technology company SoFi, has notified customers of a data breach discovered on April 30, 2026, involving unauthorized access to a company database through a third-party vendor.

The company detected the intrusion and subsequently engaged an outside cybersecurity firm to assist with its response. SoFi has not disclosed the identity of the vendor involved or the number of customers affected.

In emails sent to customers, SoFi acknowledged that it has yet to determine the full scope of the incident. "We do not yet have complete information about the scope and impact of the incident, or whether (and, if so, which categories of) your personal data was involved," the company told customers. "We are actively reviewing the situation and taking extra precautions to keep your account secure."

A SoFi spokesperson confirmed the breach but declined to answer questions about how many customers were affected, whether the company received any extortion demands, or which vendor was responsible.

While the specific data exposed remains unknown, SoFi has urged customers to stay alert for phishing attempts, suspicious communications, and unusual account activity. The company also advised customers to update their passwords, enable two-factor authentication where available, monitor financial accounts for irregular transactions, and avoid clicking links or opening attachments in unsolicited messages.

SoFi said it has deployed additional safeguards and monitoring on affected accounts and may seek extra verification from customers who contact support or make account changes.

Customers seeking more information can reach SoFi’s Hong Kong support line at +852 26938888 or by email at hello@sofi.hk. SoFi is a U.S.-based financial technology company offering banking, investing, lending, and personal finance services. Its Hong Kong subsidiary provides investment and securities services to customers in the region.