Point72 Asset Management, L.P. disclosed a data breach resulting from a social engineering incident. An unauthorized third party gained access to two Point72 user accounts on July 31, 2026, and August 3, 2026, and copied files from limited areas of the firm's systems. Point72 discovered the unauthorized activity on August 1, 2026, and August 4, 2026, subsequently filing a breach notification with state regulators, including the Massachusetts Office of Consumer Affairs and Business Regulation.
The compromised files contained sensitive personal details, specifically Social Security numbers and financial account information. A regulatory filing in Massachusetts confirmed that at least 28 state residents were affected. A nationwide total of affected individuals has not been officially released.
Security investigations and regulatory tracking remain active following the notifications. Additional information regarding the full scope of individuals affected across other jurisdictions may develop as reviews continue.