Texas Attorney General Report Says DriveWealth Breach Could Affect 2.5 Million Residents

A report on the Texas attorney general's website indicates that a cybersecurity lapse at DriveWealth could have compromised personal details for over 2.5 million Texans. The New York-based brokerage said unauthorized access happened Sept. 4-5 and was stopped the following day. DriveWealth has not identified any identity theft or improper use linked to the event and told customers to change passwords and be wary of phishing messages.
A report posted Oct. 2 on the Texas attorney general’s website says a security lapse at DriveWealth, a New York broker-dealer, may have affected more than 2.5 million Texans. Names, Social Security numbers and financial information were potentially exposed.
DriveWealth told customers the intrusion happened Sept. 4–5, 2026, and was stopped by Sept. 5. The firm said it has not seen additional suspicious activity and no confirmed identity fraud or misuse. It advised changing passwords, using antivirus tools and watching for phishing emails.
The reported exposure of names, Social Security numbers and financial details could raise identity-theft and fraud risks for affected Texans, who may face account takeover attempts, phishing or credit problems. Because brokerage data can connect personal and financial information, even without confirmed misuse, customers may need to monitor accounts and stay cautious. The incident may also increase pressure on financial firms and state officials to strengthen breach notification and data safeguards.