logo

FinWise data breach shows why encryption is your last defense

ID: 3f2af7f9-7d27-5e76-82f6-53f5e3e9fd23

STIX ID: report--3f2af7f9-7d27-5e76-82f6-53f5e3e9fd23

Feed Name: Bleeping Computer

Threat Score
70/100

Date Published: 2025-10-22

Date Updated: 2026-07-18

Author: Sponsored by Penta Security

...
...

The document describes the 2024 FinWise data breach in which a former employee used retained credentials to exfiltrate personal data for 689,000 customers (breach dated May 31, 2024) that went undetected until June 18, 2025; it criticizes FinWise's access controls and encryption practices, notes consequent legal and regulatory risk, and promotes Penta Security’s D.AMO encryption, KMS, and centralized management platform as a remediation.

Your team is not currently subscribed to this feed. You must subscribe to it in order to see this post.