Wealthsimple Data Breach – User Information Leaked Online

Wealthsimple disclosed a data security incident on 5 September 2025, revealing that personal information belonging to less than one per cent of its clients was accessed without authorisation. The breach, detected on 30 August, prompted the company to implement enhanced security measures and offer comprehensive support to affected customers.

Wealthsimple’s security team acted quickly after discovering the incident, containing the issue within a few hours of detection, with external security experts brought in for a thorough investigation. The breach originated from a compromised software package developed by a trusted third-party vendor, which allowed unauthorised access to client data for a brief period.

Data exposed included contact details, government identification documents provided during account registration, account numbers, IP addresses, and in some cases Social Insurance Numbers and dates of birth, while all client passwords remained secure and no funds were accessed or stolen. The company notified affected individuals by 10:30 AM EST on 5 September, and stated that all client accounts remained secure throughout the incident.