Short answer
Tradier Brokerage says it learned on 3 September 2026 of an attack on Etna Software Corporation, which provides its order management system, and that its own network stayed secure. Data used by Etna for account identification may have been accessed without authorization.
If you think your details were included, start with our checklist on what to do after a data breach.
Key facts
| Organization | Tradier Brokerage, Inc. |
|---|---|
| Incident type | Supply-chain compromise |
| Status | Confirmed by the organization |
| Sector | Online brokerage |
| Country | United States |
| Detected | 2026-09-03 |
| Disclosed | 2026-10-27 |
| People or records affected | Not stated in the notice reviewed |
What data was exposed
- Full name
- Address and phone number
- Possibly Social Security number or similar government-issued tax ID
What happened
Tradier Brokerage, based in Charlotte, North Carolina, sent customers a data incident notice that was filed with the California Attorney General. The California listing gives a breach date of 28 August 2026. The letter itself says Tradier became aware on 3 September 2026 of an attack against Etna Software Corporation, the company that provides the order management system and pre-trade controls Tradier uses.
Tradier says its network remained secure and that some data required for account identification by Etna may have been subject to unauthorized access. The incident sits in the vendor, not in Tradier’s own systems, according to the company.
What was involved
The letter says the extraction file may have included a customer’s full name, address, phone number and other personal information, possibly including a Social Security number or similar government-issued tax ID. It does not list account balances, holdings, passwords or trading history.
The notice does not say how many people were affected, how the attackers got into Etna or who they are. Those points are unknown from the documents reviewed.
What Tradier says it is doing
Tradier says that, together with Etna, it is reviewing the accounts of people with potentially affected records and will share significant developments. It also says it is reviewing its third-party relationships and its data minimization program. It offers up to two years of free credit monitoring and identity theft protection, activated with a code in the individual letter, and gives a toll-free hotline for questions.
Why a vendor breach still matters to you
Many people never hear the names of the vendors behind the apps they use. When a supplier is attacked, the customer notice is often the first sign. The practical risk is the same as any leak of a Social Security number: someone can try to open credit in your name or file a false tax return. Brokerage customers also draw extra phishing, because a scammer who knows you trade can pose as a support desk.
What to do
Enroll in the monitoring using the code in your own letter, freeze your credit and turn on multi-factor authentication. Read our data breach checklist for the full order of steps. Treat any message about the breach as suspect and see our guides to phishing messages and investment scams for how fake broker contacts work.
Scams to watch for after this breach
Criminals use breach news as cover. Expect messages that mention the incident, quote real details, or offer help.
- Fake 'Tradier account security' emails or texts that ask you to log in or confirm your Social Security number.
- Unsolicited calls from a 'broker' or 'fraud team' who already knows your name and address.
- Account takeover attempts at other brokerages that use your leaked identity details.
- Tax-return fraud or new-account fraud that relies on a stolen Social Security number.
What to do if you are affected
- 01Use only the enrollment code and links inside your letter to sign up for the two years of free credit monitoring it offers.
- 02Review your Tradier statements and report anything suspicious using the hotline in your letter, 1-844-772-8140.
- 03Place a fraud alert or free credit freeze with Equifax, Experian and TransUnion.
- 04Turn on multi-factor authentication for every brokerage, bank and email account.
- 05Do not click links in messages that mention the breach. Type the address of your broker yourself.
Frequently asked questions
What did Tradier say happened?
Tradier's letter says that on 3 September 2026 it became aware of an attack against Etna Software Corporation, a company that provides the order management system and pre-trade controls Tradier uses. It says Tradier's own network remained secure.
What data may have been accessed?
The letter says an extraction file may have included full name, address, phone number and possibly a Social Security number or similar government-issued tax ID. It says some data required for account identification by Etna may have been subject to unauthorized access.
Is Tradier offering credit monitoring?
Yes. The letter offers up to two years of free credit monitoring and identity theft protection, using a code printed on the individual letter.
How many people were affected?
The letter does not give a number. Check your own notice and the state listings, which can differ by state.
Who attacked Etna Software?
The notice does not say. No group has been named in the documents reviewed, and any claim about the attackers should be treated as unconfirmed.
Sources
- Data Subject Notification letter from Tradier Brokerage, Inc., Tradier Brokerage via California Attorney General
- Breach report listing for Tradier Brokerage Inc. (breach date 28 August 2026), California Attorney General, 2026-10-27
This post summarises public reporting as of 2026-11-06. Details of live incidents change; we update posts when the organization or regulators publish new facts. Spot an error? See our editorial and corrections policy.