Fintech Firm Wealthsimple Says Supply Chain Attack Resulted in Data Breach

Wealthsimple has disclosed that a data breach resulted from a supply chain attack involving a software package from a trusted third party, with the incident discovered on 30 August 2025, according to Wealthsimple. The breach affected personal information belonging to less than 1% of its customers, including contact data, government IDs provided during sign-up, IP addresses, Social Insurance Numbers, dates of birth and financial data such as account numbers.

Wealthsimple says the intrusion was contained within hours and that no funds were accessed or stolen, and that passwords were not compromised and accounts remain fully secure. Those impacted are being notified and offered free credit monitoring and identity theft protection services. Wealthsimple provides online money management and investment solutions, with assets under management reported to exceed C$84 billion. This incident follows SecurityWeek reporting on related data breaches and supply-chain security concerns in the broader ecosystem.