CFD Investments, Inc.

CFD Investments, Inc. (“CFD”) based in Kokomo, Indiana, a financial services entity reported a data breach to the Texas Attorney General. The breach was discovered on 2025-12-16 and reported on 2026-01-30. 521 Texas residents were affected. 31,731 individuals affected in total. Types of information involved: Name of individual;Social Security Number Information. Consumers were notified via U.S. Mail.

CFD Investments, Inc. notified Massachusetts residents of an incident involving their personal information. The company is offering two years of complimentary identity monitoring through Kroll. The notice does not specify the cause, date, or scope of the breach, nor the specific data types beyond general personal information.

CFD Investments, Inc. reported unauthorized access to an employee email account between March 15, 2025, and May 9, 2025. The breach was investigated with the assistance of a cybersecurity firm. On December 16, 2025, the company determined that emails or attachments in the account contained personal information of affected individuals. Kroll identity monitoring services were offered to affected individuals.

CFD Investments, Inc. notified the New Hampshire Attorney General of a phishing incident involving unauthorized access to an employee's email account between March 15 and May 9, 2025. The breach exposed the names and Social Security numbers of 8 New Hampshire residents. Notifications were mailed on January 28, 2026, offering one year of credit monitoring.

CFD Investments, Inc. reported unauthorized access to an employee's email account between March 15, 2025, and May 9, 2025. The breach exposed the names and Social Security numbers of 29 Nebraska residents. CFD engaged a cybersecurity firm, secured the account, and began mailing notification letters on January 28, 2026, offering one year of complimentary credit monitoring.

CFD Investments, Inc. reported an external system breach (hacking) affecting an employee's email account. Unauthorized access occurred between March 15, 2025, and May 9, 2025. The breach exposed names, SSNs, driver's license numbers, and financial account numbers of 10 Maine residents. CFD engaged a cybersecurity firm, secured the account, and mailed notifications on January 28, 2026, offering one year of credit monitoring.

CFD Investments Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-03-15 and was reported on 2026-01-28. 9,689 Indiana residents were affected. 31,731 individuals affected in total.

CFD INVESTMENTS, INC. (“CFD”) filed a data-breach notice with the Illinois Attorney General in January 2026 (case 26-01-773). The register records the breach as discovered on December 16, 2025. Personal information types reported: drivers license, financial account number, medical information, passport number, ssn. Illinois does not publish the number of people affected — 815 ILCS 530/10 permits the Attorney General to publish only the entity name, the types of personal information and the date range.

cfd Investments Inc reported a data breach to the Indiana Attorney General. The breach occurred on 2025-04-24 and was reported on 2025-04-24. 1 Indiana residents were affected.

CFD Investments, Inc. notified Montana residents of a phishing incident targeting employees, leading to unauthorized access to email accounts containing names and Social Security numbers. The company secured accounts, investigated, and offered one year of Kroll identity monitoring.