Dragonfly Digital Management Discloses Data Breach Affecting Sensitive Personal and Financial Information Dragonfly Digital Management LLC, a San Francisco-based SEC-registered cryptocurrency and blockchain venture capital firm, revealed a data breach detected on January 16, 2026, that may have exposed sensitive personal and financial information. The incident was reported to the Massachusetts Office of Consumer Affairs and Business Regulation on April 10, 2026, with consumer notifications issued the same day. While the total number of affected individuals across the U.S. remains undisclosed, at least nine Massachusetts residents were impacted. The breach involved unauthorized access to data collected through Dragonfly’s compliance processes, potentially exposing a range of personal details, including: - Names, phone numbers, and email addresses - Physical addresses - Taxpayer identification or Social Security numbers - Government-issued IDs (passports, driver’s licenses) - Bank and financial account numbers No loss of funds was reported as a result of the incident. Following the discovery, Dragonfly engaged CrowdStrike, a third-party cybersecurity firm, to conduct a forensic investigation. In response, the company is offering 24 months of complimentary identity protection and credit monitoring through Experian IdentityWorks, including credit reports, daily monitoring, identity restoration support, and $1 million in identity theft insurance. Affected individuals must enroll by July 31, 2026, using an activation code provided in their notification letter. For further assistance, affected parties can contact Experian’s customer care team or report suspicious communications to Scott Hershorin at Dragonfly.