US Tiger Securities Inc. (US Tiger) experienced a data breach involving ransomware and data exfiltration. The incident, which occurred between July 8 and July 9, 2025, affected a third-party virtual back-office environment used by US Tiger and its affiliate, TradeUP Securities. The company discovered the breach on July 10, 2025.
The breach exposed personal data including names, Social Security numbers, driver's license numbers, government-issued ID numbers, medical information, and health insurance information. The exact number of affected individuals has not been publicly disclosed. US Tiger completed its data review on April 17, 2026, and began notifying affected individuals by May 15, 2026. A report was submitted to the Texas Attorney General's Office.
More details may emerge as investigations continue, and notification processes may still be ongoing.