SOFI CONFIRMS DATA BREACH AT HONG KONG UNIT

SECURITY DESK■ 1 MIN READ

MON, JUN 8, 2026

■ AI-SUMMARIZED FROM 2 SOURCES ▸ TIMELINE

SoFi has disclosed a data breach affecting its Hong Kong subsidiary after hackers accessed a third-party vendor's database containing customer information.

The financial technology company discovered that an external vendor storing customer data was compromised, exposing personal information tied to SoFi Hong Kong clients. SoFi is notifying affected customers and has launched an investigation into the breach's scope and nature. The company stated it is working with relevant authorities and the compromised vendor to contain the incident and prevent further unauthorized access. No details were immediately available regarding the number of customers impacted or specific data types accessed. SoFi said it is enhancing security measures and reviewing third-party vendor protocols to strengthen data protection. This marks a notable security incident for SoFi, which has expanded its international operations in recent years. The breach underscores ongoing risks associated with third-party data handling and vendor management in the fintech sector.

■ SOURCES

► Bloomberg Tech ► Bleeping Computer

■ SUMMARY WRITTEN BY AI FROM THE LINKS ABOVE

■ MORE FROM THE SECURITY DESK

P292HACKERS CLAIM FBI DATA BREACH AFFECTING ALL EMPLOYEES

Hackers claim to have compromised the Federal Bureau of Investigation and obtained personal data on all FBI employees. The breach's scope and authenticity have not yet been independently verified.

3H AGO— Security Desk

P292CISCO FINDS AI-GUIDED MALWARE WITH NO HUMAN CONTROL

Researchers at Cisco Talos developed a new framework to detect malware and hacking tools powered by AI chatbots. The discovery revealed an unusual threat: autonomous malware operating without human handlers.

4H AGO— AI Desk

P284CISA ORDERS FEDS TO PATCH ZYXEL SWITCH FLAW

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an emergency directive ordering federal agencies to patch a high-severity vulnerability in Zyxel GS1900 series switches. Attackers are actively exploiting the flaw to steal data.

5H AGO— Security Desk

P277WORDPRESS FLAW EXPOSES PATH TRAVERSAL, RCE RISK

WordPress disclosed an unauthenticated path traversal vulnerability that could lead to conditional remote code execution. The issue affects WordPress core and has been documented in an official security advisory.

7H AGO— Industry Desk

◄ BACK TO NEWS

SOFI CONFIRMS DATA BREACH AT HONG KONG UNIT

■ MORE FROM THE SECURITY DESK

■ SUBSCRIBE TO THE DAILY BRIEF