HackingStolen CredentialsCapture App DataCustomer Data InvolvedDelayed DiscoveryPIILowResolved
CFD Investments, Inc. (“CFD”)
bd_3c1e06c650ed1504 · schema v1 · pii pii-v1
Full breach record for CFD Investments, Inc. (“CFD”) →CFD Investments, Inc. reported unauthorized access to an employee email account between March 15, 2025, and May 9, 2025. The breach was investigated with the assistance of a cybersecurity firm. On December 16, 2025, the company determined that emails or attachments in the account contained personal information of affected individuals. Kroll identity monitoring services were offered to affected individuals.
This filing is one of 5 about the same incident.View merged incident
Linked disclosures
Why this link?Regulatory filings (4) · sorted by filing gap
- bd_90489b77c28869ffNew Hampshire State AGfiled 2026-01-28(43d gap)Verified
- bd_ae4f20bdb0fce474Maine State AGfiled 2026-01-28(43d gap)Verified
- bd_ff9bf83e6fe55f68Indiana State AGfiled 2026-01-28(43d gap)Verified by operator
- bd_fc7b5ef74adf35a7Texas State AGfiled 2026-01-30(45d gap)Verified
Source provenance
- Source URL
- https://oag.ca.gov/ecrime/databreach/reports/sb24-617793
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Dec 16, 2025
- Raw hash
- c2dad7073bffa8d015cea06202fd3b9e8b2fc1403574dea549faa6e354c9d5ba
Reporting entity
- Name
- CFD Investments, Inc. (“CFD”)norm: cfd investments inc cfd
Victim entity
- Name
- CFD Investments, Inc. (“CFD”)norm: cfd investments inc cfd
Incident
- Discovered
- —
- Materiality determined
- Dec 16, 2025
- Notification sent
- —
- Affected individuals
- Not disclosed
- Data types
- PII
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1078 Valid AccountsT1114 Email Collection
- Threat actor
- ExternalFinancial
- Regulator citations
- Notified California Office of the Attorney General
Compliance
- Compliance flags
- — (clock not assessable for this source)
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.