Dear Valued Customer,

DriveWealth currently provides executing and clearing services to a number of global investment firms and historically contracted directly with you to provide such services under our clearing broker agreement. DriveWealth recently discovered unauthorized access to its network that occurred between September 4, 2026 and September 5, 2026, which was a result of a sophisticated social engineering campaign conducted against us by unknown third parties. This security incident involved unauthorized access to historic personal data we held about you when you directly contracted with us in the past. This data remains to date contained in certain systems of DriveWealth. DriveWealth currently holds this historic personal data as it is required to under its own regulatory retention period requirements.

The historic personal data involved in this security incident may include:

Customer profile data, such as your name, email address, phone number, postal addresses, and employment information
Biographical data, such as your country of citizenship, age, and gender
Partial DriveWealth account number

At this time, we have no reason to believe any other personal information was affected. In particular, no passwords or financial payment information (such as credit card or bank account details) were compromised.

Possible potential risks

As a result of this security incident, there is a potential risk that your personal data could be misused by unauthorized third parties. You may be exposed to phishing attempts (fraudulent emails or messages designed to trick you into revealing sensitive information), identity fraud or impersonation, social engineering aimed at obtaining additional personal or financial information, and unsolicited contact from unknown parties.

Please check the section below for further information.

Steps we’ve taken to minimize potential negative consequences of the breach

Upon learning about the incident, we promptly initiated an investigation into what happened and engaged a third-party forensic company to assist us. We took steps to secure the data and shut down further unauthorized access to our systems.

We have reported this security incident to the Data Protection Authority in Lithuania. We have also taken steps to avoid the recurrence of such an incident, such as strengthening our security measures and the security of our systems.

What you should do to minimize potential risk

We recommend that you take the following measures yourself:

Practice good data security by ensuring that your computer has anti-virus protection and that it is up-to-date and by updating your passwords regularly, ensuring that your passwords are complex and unique and enabling Multi-Factor Authentication where possible.
Remain always alert to phishing scams. Phishing scams involve fraudulent (i.e., fake or “spoofed”) email messages that appear to come from legitimate sources and encourage you to (i) click on a link or open an attachment that will download malware onto your computer, or (ii) provide an unknown third party with certain types of information. For example, you may receive an email that directs you to input information, such as your username and password, into an unauthorized website. You may also receive an email from a source that appears to be legitimate but may be off in some way. An email may also be a phishing scam if it has certain anomalies, such as misspellings or awkward phrasings.
Please always forward any suspicious emails allegedly coming from DriveWealth to accountsecurity@drivewealth.com before you click on any links, open any attachments, or respond in any way.

For now, there are no other actions that DriveWealth customers need to take as a result of this incident. However, we always recommend that you take the time to evaluate your security practices.

Impact on our partners

The security incident referred to above took place on our systems. There is nothing to suggest that the partners we work with globally to offer our services are affected in any way.

If you have any further questions, please feel free to contact drivewealth@transunion.com or visit legal.drivewealth.com/cyber-response.

Protecting your information is important to DriveWealth and we sincerely regret any inconvenience this may cause you. We remain committed to continuously strengthening the security of our services and systems and are taking additional measures designed to significantly reduce the risk of a similar incident occurring in the future. The security of your data remains a top priority for us.

Sincerely,

DriveWealth