Nium Data Breach Exposes Sensitive Customer Information in 2025 On November 3, 2025, global fintech company Nium, Inc. detected unauthorized access to its file system, revealing that an old 2022 customer data file had been compromised. The breach exposed sensitive personally identifiable information (PII), including names, email addresses, physical addresses, phone numbers, Social Security numbers, and dates of birth. Nium, a Singapore- and San Francisco-based financial technology firm specializing in cross-border payments, operates in over 190 countries and serves banks, fintechs, and enterprises. The company responded by restricting access, launching an investigation, and notifying authorities, including the Massachusetts Attorney General’s office on December 10, 2025. According to the disclosure, 13 Massachusetts residents were affected, though the full scope of impacted individuals remains unclear. The exposed file was primarily used for technical system logs, but a subset contained personal data. In response, Nium has strengthened monitoring, implemented additional security controls, and plans to migrate to a new technology stack. Affected individuals are being offered complimentary credit monitoring. The breach raises concerns about identity theft, phishing, and fraud, as compromised data could be exploited for malicious purposes. Legal firms, including Shamis & Gentile P.A., are investigating potential class action lawsuits for affected customers.