USForex Inc., operating as OFX, reported a cybersecurity incident involving unauthorized access that occurred and was detected around September 28, 2026. The financial services firm subsequently filed breach notifications with state regulators, including the California Attorney General on October 26, 2026, and authorities in New Hampshire on October 13, 2026. Filings were also triggered across multiple other states including Iowa, Massachusetts, Nebraska, Oregon, Rhode Island, South Carolina, Vermont, and Washington.
The exact categories of compromised personal information and the total number of affected individuals have not been publicly confirmed in regulatory disclosures. While secondary reports note potential exposure of personal and financial records, USForex has not officially detailed the specific data types involved.
Additional details regarding the full scope of the breach and its impact may emerge as regulatory filings and forensic investigations progress. Consumer notification letters may experience delays or staggered distributions depending on the findings of ongoing inquiries.