SoFi Confirms Customer Data Breach via Third-Party Contractor

Fintech platform SoFi Hong Kong has officially confirmed a data breach resulting from a hack of a database at one of its external partners. The incident affected customer information stored on third-party servers.

According to preliminary findings, attackers accessed a portion of user personal data, including contact details. SoFi representatives emphasized that the company’s core systems were not compromised, and the breach was limited to the contractor’s perimeter.

The company is currently conducting a detailed investigation into the incident. SoFi has also notified regulators and customers, advising users to monitor financial transactions closely and enable multi-factor authentication where possible.

Cybersecurity experts note that attacks on third-party vendors are becoming an increasingly common vector for data compromise. Such incidents underscore the need for stringent security controls in IT service supply chains.