SoFi Technologies, Inc. experienced a data breach in late 2025/early 2026, which was reported to the Washington Attorney General on January 26, 2026. This incident has been described as a social engineering attack on internal systems. Affected individuals were notified via written mail around the same time.
The confirmed data types exposed in this breach include names, full dates of birth, addresses, email addresses, phone numbers, employment information, and education information. At least 38,049 Washington residents were affected. Available reporting indicates that account passwords, debit/credit card numbers, and account numbers were not accessed, and there is no confirmation of SSN or medical data exposure in the cited sources.
Details about data breaches can emerge over time, and consumer notices may be delayed.