Wealthsimple supply chain attack leaks customer personal data
A supply chain attack on Canadian investment platform Wealthsimple leaked customers' personal information, and some Social Insurance Numbers were also accessed without authorisation. A third-party software vulnerability was identified as the breach vector. Wealthsimple executives apologised to customers and said account information had not been misused.
Key facts
- Affected organisation
- Wealthsimple
- Incident type
- Data breach
- Occurred / detected
- Not confirmed
- Scale of damage
- Personal information and Social Insurance Numbers of some customers
- Cause / method
- Supply chain attack via a third-party software vulnerability
- Location
- Canada
If your data was exposed
Exposed dataNational ID number
Timeline
- Unauthorised access to Wealthsimple customers' personal information and some Social Insurance Numbers came to light.
- Wealthsimple acknowledged the data leak from the supply chain attack, apologised to customers and said account information had not been misused.
- A third-party software vulnerability was identified as the vector for the breach of the Wealthsimple platform.
7 related reports
- 캐나다 투자 플랫폼 ‘웰스심플’ 고객 개인정보 유출
- Wealthsimple client data, including SINs, accessed in security breach
- Wealthsimple says some SINs accessed in ‘data security incident’ - National
- Wealthsimple says personal client data accessed in security breach
- Fintech Firm Wealthsimple Says Supply Chain Attack Resulted in Data Breach
- Wealthsimple exec apologizes to customers after data breach, says no account details were misused
- Wealthsimple Supply Chain Attack: How Third-Party Software Vulnerabilities Compromised the Wealthsimple Platform
The summary and key facts are written by AI from related reports and may contain errors. Check the original articles and the organisation’s official statements for accurate details.