SogoTrade, Inc., an online brokerage and financial services company, experienced a data breach discovered on March 18, 2025. The incident reportedly occurred between May 8 and May 22, 2024. Unauthorized access to four employee email accounts, associated with a phishing attack and malware, led to the breach. SogoTrade contained and remediated the incident, offering affected individuals complimentary credit monitoring.
The exposed data includes names, Social Security numbers, tax identification numbers, and financial account information. Approximately 48,696 individuals were affected, according to breach summaries citing the company’s notification data. The available records do not identify medical information or whether the affected data was encrypted or if customer login credentials were exposed.
Individual notices were reportedly sent between May 2 and May 7, 2025. While California and Montana have recorded filings, a complete nationwide list of affected states has not been established. Information can emerge later, and specific details or amended filings may appear over time.