CFD Investments Reports Data Breach Following Employee Email Compromise
Learn More
CFD Investments, a financial services firm based in Indiana, reports a cyberattack when an attacker broke into an employee's email account. The incident access occurred between March 15 and May 9, 2025.
The company launched an investigation after learning that sensitive client data stored in the account might have been viewed or stolen during the two-month intrusion. The investigation confirmed that the breach exposed a variety of personal and financial details. The stolen data items include:
- Full names
- Social Security numbers
- Driver’s license numbers
- Financial account numbers
CFD Investments reported the incident to the authorities and on January 28, 2026, began mailing notification letters to 1,414 affected individuals. The firm is providing these individuals with complimentary credit monitoring services.
Law firms have initiated investigations into the company's security practices to determine if they met industry standards.
Affected clients should monitor their financial statements for any unauthorized transactions.
