DriveWealth

DriveWealth's network was entered between September 4 and 5, 2026 via a social engineering campaign aimed at an unidentified third-party service provider. As the Brokerage-as-a-Service layer underneath Revolut, Stake, and Hatch, one vendor's failure became three brands' breach notice, spilling names, employment data, citizenship, and tax and portfolio data across five countries. Passwords and card numbers were left untouched; too bad the records of who these customers were not.