SoFi Hong Kong Reports Data Breach via Third-Party Vendor SoFi Hong Kong, a subsidiary of U.S.-based financial technology company SoFi, has disclosed a data breach after hackers accessed a customer database through a third-party vendor. The incident was detected on April 30, 2026, when unauthorized access to a database belonging to SoFi Securities (Hong Kong) Limited was identified. SoFi engaged a third-party cybersecurity firm to investigate the breach, though the full scope and impact remain unclear. In emails sent to affected customers, the company stated it has not yet determined which specific data may have been exposed. A SoFi spokesperson confirmed the breach to BleepingComputer but declined to provide further details, including the number of impacted customers, whether extortion was involved, or the identity of the compromised vendor. While the exact data at risk has not been disclosed, SoFi advised customers to watch for phishing attempts, suspicious communications, and unusual account activity. The company has implemented additional safeguards, including enhanced monitoring of affected accounts and potential verification requirements for support interactions or account changes. Customers seeking assistance were directed to a Hong Kong support line (+852 26938888) and email ([email protected]). The investigation remains ongoing.