Australian trading and investment platform Stake has confirmed that thousands of its customers' personal data was compromised in a data breach originating from third-party partner DriveWealth. The incident exposed customer names, email addresses, phone numbers, postal addresses, tax status and tax country information. Importantly, Stake clarified that no trading accounts, portfolios, tax file numbers or bank accounts were affected, and no unauthorised transactions occurred.

Stake, founded in Sydney in 2017, currently operates with nearly 500,000 customers worldwide and manages an estimated $6 billion in assets. The breach represents the latest in a series of high-profile data security incidents affecting Australian companies and government services, following a July breach of over one million Origin Energy customers and an OpenAI agent's unauthorised access to an Australian government Medicare portal in June.