Driver FixRecommendedSound, Wi-Fi or graphics acting up? Check drivers firstFind missing or outdated drivers fast.Check DriversOctober DealsAmazon USOctober deal check: compare before you payAmazon US: current deals, useful picks and tech finds.Check DealsWindows FixRecommendedWindows errors stealing your time? Find the fix fastScan stability, cleanup and performance issues.Fix Now×
Skip to content
The Finance Base
The Money Desk · Blog
Re:

Wealthsimple Security Incident: What Customer Information Was Accessed

Wealthsimple says a third-party software package was compromised and personal data from less than 1% of clients was accessed. Here’s what may have been exposed and how to respond.
From TheFinanceBase Team3 min to read

Free tools Windows power users keep installed

One-click scans. No signup required.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Wealthsimple says a security incident detected on August 30 involved unauthorized access to personal data belonging to less than 1% of its clients. The company says the data could include account numbers, government IDs and Social Insurance Numbers (SINs), but says passwords were not compromised and no funds were accessed or stolen.

What happened in the Wealthsimple security incident?

Wealthsimple’s incident notice says the company detected the incident on August 30, 2026. It attributes the event to a compromised software package written by a trusted third party. Wealthsimple says it contained the incident within hours. The notice does not name the software package, third party or attacker, or explain the attack method.

Wealthsimple says personal data belonging to less than 1% of its clients was accessed without authorization for a brief period. That is the only numerical measure of the incident provided in the notice; the company does not give an exact number of people affected. The reported scope comes from Wealthsimple, and the reviewed sources do not include an independent regulator or forensic finding confirming it. (Wealthsimple’s incident notice)

What information may have been exposed?

Wealthsimple says accessed information could include one or more of these categories. Its notice does not say that every affected client had every category exposed.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.
  • Contact details
  • Government identification documents provided during signup
  • Financial details, such as account numbers
  • IP address
  • Social Insurance Number (SIN)
  • Date of birth

Were passwords or funds affected?

Wealthsimple says no passwords were compromised, no funds were accessed or stolen, and all accounts remained secure. Those statements distinguish the company-reported personal-data exposure from account access or fund theft; they do not mean no personal information was exposed.

How can you tell whether you were affected?

Wealthsimple says it emailed affected clients and that all notification emails had been sent by September 5, 2026, at 10:30 a.m. Eastern Time. The company says clients who did not receive an email were not impacted. This is Wealthsimple’s assurance in its notice; it does not publish an exact affected-client count. (Wealthsimple’s incident notice)

If you received a notification, follow the instructions in that message and contact Wealthsimple through its official app or website if anything is unclear. Be wary of messages impersonating the company: Wealthsimple says it will not ask for your password or authentication codes, or ask you to move money.

What should you do if your SIN or ID may have been exposed?

Exposure of a SIN or government ID can raise the risk of identity fraud even when an account password or funds were not affected. If Wealthsimple notified you that your data may have been involved, use the credit and identity-protection services the company says it offered to impacted clients. Wealthsimple says the offer includes two years of free credit and dark-web monitoring, identity theft protection and insurance. Check the terms and enrollment instructions in the company’s notification.

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Watch for unexpected messages or calls asking for personal information, sign-in credentials, authentication codes or money transfers. Do not use links or phone numbers in a suspicious message; reach Wealthsimple through its official app or website instead.

What to do if you suspect someone accessed your account

These steps are for suspected account compromise; they do not establish that your information was part of the reported incident. Wealthsimple’s support guidance recommends:

  1. Change your password immediately through the Wealthsimple app or website.
  2. Contact Wealthsimple support through its chat.
  3. Review recent transactions and your account’s security settings.
  4. Secure the email account associated with Wealthsimple and any linked bank accounts.
  5. Remove any trusted devices you do not recognize.
  6. Report suspected identity compromise to local police.

See Wealthsimple’s account-compromise guidance for its current instructions.

Independent reader supportYour contribution helps us test, update, and keep practical guides available for everyone.Support on Ko-Fi

How to strengthen your Wealthsimple sign-in

Wealthsimple recommends using an authenticator app for two-factor authentication, avoiding password reuse and staying alert to phishing. The company also supports passkeys, which it describes as credentials tied to a device that can satisfy its two-factor authentication requirement. It supports time-based codes through authenticator apps, SMS or automated calls. These methods can help protect future sign-ins; they cannot undo exposure of data that may already have been accessed. (Wealthsimple’s account security and privacy overview)

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

Wealthsimple’s account guarantee is separate from the monitoring and identity-protection offer. Its guarantee summary describes conditional coverage for eligible direct monetary losses from unauthorized transactions, subject to requirements that include using passkeys on all devices, prompt reporting, cooperation and maintaining a secure device. It excludes some situations, including scams in which a customer authorized the transaction. It is not reimbursement for exposed personal information. Review the guarantee’s terms for eligibility and exclusions.

Product prices and availability are accurate as of the date/time indicated and are subject to change. Any price and availability information displayed on Amazon at the time of purchase will apply.

Leave a Reply

Your email address will not be published. Required fields are marked *

Special offer. See more information about Outbyte and uninstall instructions. Please review EULA and Privacy policy.

More post from the Money Desk

  1. The Money DeskBlogTheFinanceBase09 OCT 267 minMortgage Escrow FAQs: Taxes, Insurance, Shortages, and Refunds
  2. The Money DeskBlogTheFinanceBase09 OCT 265 minHow Mortgage Escrow Accounts Work and What Homeowners Pay For
  3. The Money DeskBlogTheFinanceBase09 OCT 265 minHow to Read a Stock Chart, Volume and Market-Cap Data
Recommended PC Tool
Recommended PC Tool
Windows Errors? Fix Them Before They SpreadFree repair scan
Crashes, No Sound, or Screen Glitches?Free driver scan

Two free Windows tools

One Free Minute Could Fix That PC

Before you go - each of these free tools takes about a minute and tackles what quietly slows a Windows PC down.

Special offer. View Outbyte info, uninstall instructions, EULA, and Privacy Policy.