Canadian investment platform Wealthsimple disclosed a data breach

Wealthsimple, a leading Canadian fintech, disclosed a data breach on August 30, 2025, caused by a supply chain attack involving a compromised third-party software package. The incident affected less than 1% of customers, exposing personal data such as contact details, government IDs, account numbers, Social Insurance Numbers, IP addresses, and dates of birth. No passwords or funds were accessed, and all accounts remain secure. Wealthsimple contained the breach within hours, notified impacted clients, and offered two years of free credit monitoring, dark web monitoring, ID theft protection, and insurance. Regulators have been informed, and additional security measures have been implemented.