On December 16, 2025, CFD Investments, Inc. discovered unauthorized access to an employee's email account that occurred between March 15 and May 9, 2025. The company secured the account, enhanced security measures, and began notifying affected individuals on January 28, 2026.
Personal information compromised in the breach includes names, Social Security numbers, driver's license numbers, other government IDs, and financial account numbers. No medical data was involved. A total of 31,731 individuals across the United States were affected, with specific numbers reported for Indiana (9,689), Texas (521), Massachusetts (79), Maine (10), and New Hampshire (8). The company offered one year of complimentary credit monitoring and identity theft protection services through Kroll. While regulatory filings confirm these details, some specifics regarding the full scope of individuals affected in certain states, like Vermont and California, have not been publicly detailed in the provided sources.
More details may emerge as investigations continue and as notices reach all affected individuals.