Incident

Australian investment firm XM group customer data of over 400k people possibly leaked


Learn More

Claimed data of customers of XM Group, an international investment firm based in Sydney, has surfaced on a popular clear web hacking forum.

A user, identified as "wht," claimed to have obtained personal details of more than 400,000 Australian customers of the XM Group and posted the details on May 18, 2024. The forum post includes full details of 11 individuals and their trading assets worth over $5,000. But the email addresses in the sample have been previously exposed in other data breaches, so the legitimacy of the entire data set is still not confirmed.

The full dataset is available exclusively to users with upgraded memberships on the hacking forum. The method through which the data was acquired has not been disclosed by the poster.

The exposed data includes sensitive personal information of 438,522 customers, detailed in a CSV file. The data points listed include:

  • Full name
  • Gender
  • Email
  • Date of birth
  • Phone number
  • Street name
  • City
  • Postcode
  • Assets traded
  • Value in AUD being traded
  • Website

The XM Group has not commented on the post. Customers should be careful and on the lookout for any suspicious activities related to their personal and financial information.

Australian investment firm XM group customer data of over 400k people possibly leaked