SoFi Hong Kong, a subsidiary of the U.S.-based financial technology company SoFi, has reported a data breach involving unauthorized access to customer information through a third-party vendor. The breach was identified on April 30, 2026, when SoFi discovered that hackers accessed a database belonging to SoFi Securities (Hong Kong) Limited. In response, the company has engaged a third-party cybersecurity firm to investigate the incident, which is ongoing. SoFi has not yet determined the specific data that may have been compromised or how many customers are affected. In communications to customers, SoFi emphasized the importance of vigilance against phishing attempts and unusual account activity. Customers are encouraged to update their passwords, enable two-factor authentication, and monitor their financial accounts closely. SoFi has also enhanced security measures for affected accounts and may require additional verification for customers making account changes. For further assistance, SoFi has provided a dedicated support line and email for inquiries regarding the breach.