OFX Investigates Unauthorized Access to Data, Including Client Information
Summary
OFX says unauthorized access to data, including information relating to some clients and job applicants, is under investigation. The company reports no identified access to client accounts or funds and says services remain operational.
Key points
- OFX disclosed unauthorized access to data and is investigating the incident.
- The company has not yet confirmed how many clients or other individuals may be affected.
- OFX has not identified unauthorized access to client accounts or funds, or financial losses to clients.
- It does not currently appear that identity-document copies were accessed or that the accessed data could be used to make payments through OFX.
- Potentially affected data may include information about job applicants and other people who interacted with OFX outside a client relationship.
- OFX says its teams acted promptly, implemented containment measures, and its services remain available.
- OFX notified Australian and other global authorities; investigations are continuing.
Article Details
- Victim Organization
- OFX Group Limited
- Victim Domain
- ofx.com
- Incident Type
- Cybersecurity incident involving unauthorized access to data, including data relating to some clients and individuals who interacted with OFX in non-client capacities.
- Disclosure Date
- 2026-10-02
- Data Types Exposed
- Client-related data
- Data relating to individuals who interacted with OFX in non-client capacities, such as job applicants
- Affected Records
- Unknown; OFX had not identified the number of clients whose data may have been accessed.
- Operational Impact
- OFX stated that its services and systems continued to operate normally and remained fully available. It reported no identified unauthorized access to client accounts or funds and no financial loss to clients based on information available at the time. OFX implemented containment actions.
- Claim Status
- confirmed