CFD Investments Data Breach Lawsuit Investigation
On January 28, 2026, CFD Investments began notifying individuals that personal information was exposed after an outside party accessed an employee email account. If you received a data breach letter from CFD Investments, you may be entitled to free identity-theft protection and potential compensation. Complete the short form on this page for a no-cost case evaluation.
Download Official Breach Notice (PDF)What Happened?
CFD Investments, Inc. (“CFD”) discovered that an unauthorized party accessed one of its employee’s email accounts between March 15 and May 9, 2025. The company learned of the intrusion on December 16, 2025, after completing a forensic review assisted by a third-party cybersecurity firm.
Information Exposed
During the review of messages and attachments, CFD determined that the following data elements were present in the compromised mailbox:
- Name
- Social Security number
- Driver’s license number
- Financial account number
The Maine Attorney General’s office reports that 10 Maine residents were affected. CFD did not disclose whether additional individuals in other states were impacted.
Company Response
According to the consumer notice filed with the Maine Attorney General:
- CFD secured the affected email account immediately after detection.
- A cybersecurity firm assisted with containment and investigation.
- The firm is “taking steps to enhance existing security measures” to prevent similar incidents.
- Impacted individuals are being offered complimentary identity-monitoring services through Kroll, which include credit monitoring, fraud consultation, and identity-theft restoration.
Protecting Yourself After the CFD Investments Breach
CFD urges recipients to remain vigilant by reviewing bank statements and credit reports for the next 12–24 months. Additional recommendations include:
- Request free annual credit reports via AnnualCreditReport.com or 1-877-322-8228.
- Consider placing a fraud alert or security freeze with Equifax, Experian, and TransUnion.
- Report suspected identity theft to IdentityTheft.gov and local law enforcement.
Legal Options: Can You Seek Compensation?
Financial and tax-related data rank among the most sensitive forms of personal information. When companies fail to protect this data, courts have held them accountable for resulting losses, including time spent monitoring accounts, out-of-pocket expenses, and emotional distress. If you received CFD’s breach letter, you can:
- Request a free legal review to determine eligibility for a data breach lawsuit or class action.
- Leverage statutory damages available under state consumer-protection and privacy laws.
- Pursue reimbursement for identity-theft losses, if any occur.
Timeline of Key Events
- March 15 – May 9, 2025: Unauthorized access period.
- December 16, 2025: Personal data confirmed inside the compromised mailbox.
- January 28, 2026: Breach notices sent to impacted individuals and filed with the Maine Attorney General.
Company Overview
CFD Investments, Inc. (CFD Investments) is a broker-dealer and financial-services firm. Corporate details include:
- Website: cfdinvestments.com
- Contact: cfdinvestments.com/contact-us/
- Headquarters: 2704 South Goyer Rd., Kokomo, IN, USA
- Year Founded: 1990
- Industry: Financial Services
- Parent Entity: CFD Companies
Frequently Asked Questions
I received a data breach letter from CFD Investments — what should I do?
Follow the activation instructions in the letter to enroll in the complimentary Kroll identity-monitoring services. Review your credit reports and account statements regularly, and consider placing a fraud alert or credit freeze. If you observe suspicious activity, report it immediately to law enforcement and the credit bureaus.
How do I submit a claim related to the CFD Investments data breach?
Complete the free case-evaluation form on this page. An attorney will review your situation and explain the process for joining a data-breach lawsuit or individual claim.
What information did the CFD Investments breach expose?
CFD reports that names, Social Security numbers, driver’s license numbers, and/or financial account numbers were present in the compromised email account.
Did CFD Investments offer credit monitoring, and for how long?
Yes. Impacted individuals are being provided complimentary identity-monitoring services through Kroll, which include credit monitoring, fraud consultation, and identity-theft restoration. The enrollment details and duration are listed in the mailed notice.
How many people were affected by the CFD Investments breach?
The Maine Attorney General indicates that 10 Maine residents are affected. CFD has not publicly stated whether additional individuals in other states were impacted.
How can I get the official breach notice (PDF) for CFD Investments?
You can download the notice directly from the Maine Attorney General’s website or by clicking the “Download Official Breach Notice (PDF)” button near the top of this article.
