TradeZero America, an online brokerage firm based in Brooklyn, New York, reported a data breach to the Attorney General of California involving sensitive personal identifiable information. The breach stemmed from suspicious activity detected on July 29, 2024, within the environment of its third-party vendor, Tawk.To. Upon learning of the incident, TradeZero launched an investigation to understand the nature and scope of the breach, focusing on the potentially compromised data stored on the vendor’s platform.
Through its investigation, TradeZero discovered that an unauthorized actor may have accessed personal information contained in files associated with customer communications on Tawk.To’s system. The data potentially exposed varied depending on the individual and included sensitive details such as names, Social Security numbers, driver’s license numbers, passport numbers, bank account information, and financial brokerage information. TradeZero initiated a comprehensive review to determine the extent of the breach and identify impacted individuals.
On September 19, 2024, TradeZero began sending notification letters to affected individuals. These letters detailed the types of sensitive information that may have been compromised and offered guidance on mitigating risks. To support those impacted, TradeZero provided 12 months of complimentary credit monitoring services to help protect against identity theft and other potential fallout from the breach.
Founded in 2015, TradeZero America specializes in commission-free stock trading and offers a suite of trading platforms catering to both novice and active traders. The company’s swift action to notify affected individuals and offer credit monitoring reflects its commitment to customer care and transparency. TradeZero is continuing its efforts to strengthen security measures and prevent future incidents while maintaining trust with its customers.
Reference:
