OFX Cybersecurity Incident
Last updated: 15 October 2026 4:00pm AEDT
OFX continues to progress its investigation of the cybersecurity incident involving unauthorised access to data.
The investigation confirmed the databases supporting OFX’s client platforms were not accessed.
OFX Security and IT teams took immediate steps to contain the incident and OFX has increased monitoring of client accounts. OFX has not identified any unauthorised access to client accounts or funds. The affected files did not contain copies of identity documents. None of the accessed data can be used to make a payment on the OFX platform.
Services have continued to operate normally and the client platform has remained fully available.
OFX has been directly contacting affected clients and individuals.
Last updated: 4 October 2026 11am AEDT
OFX is investigating a cybersecurity incident involving unauthorised access to data, including data relating to some clients. There also appears to be data relating to individuals who have interacted with OFX in non-client capacities, such as job applicants.
At this stage, OFX has not identified any unauthorised access to client accounts or funds. It does not appear that any copies of identity documents have been accessed. It also appears that none of the data accessed can be used to make a payment in the OFX platform.
OFX’s services and systems continue to operate normally and remain fully available.
The security of our clients’ accounts and information is our highest priority. OFX’s IT and Security teams responded immediately when they became aware of the incident and have implemented containment actions.
All clients and individuals affected will be contacted directly by OFX if their data has been accessed.
What should you do next?
OFX has begun directly contacting clients and individuals if their data has been accessed.
FAQs
How will I know if I have been impacted?
OFX has been directly contacting affected clients and individuals.
Is my OFX account secure?
The investigation confirmed the databases supporting OFX’s client platforms were not accessed.
OFX Security and IT teams took immediate steps to contain the incident and OFX has increased monitoring of client accounts. OFX has not identified any unauthorised access to client accounts or funds. The affected files did not contain copies of identity documents. None of the accessed data can be used to make a payment on the OFX platform.
Are we still operating as normal?
Yes. OFX’s services and systems continue to operate normally and remain fully available. You can continue to use your OFX account.
We can confirm the databases supporting OFX’s client platforms were not accessed.
How will you keep clients updated?
We will continue to update this webpage regularly with the latest updates. OFX has begun contacting clients directly if their data has been accessed.
Why didn’t you tell me sooner?
Thank you for your patience while we worked through our investigation. We contacted impacted clients as soon as we had identified their information may have been accessed. We felt it was important to be transparent and wanted to ensure those impacted could stay alert and take steps to protect themselves online.
We’re now moving into the next phase of communications. Impacted clients and individuals will start to receive updates that confirm what information relating to them was accessed.
How can I get in touch?
We’ve set up a dedicated phone line to support general questions about the incident. Please refer the numbers below for your region.
For account related business enquiries, you can email us at business@ofx.com
For related consumer enquiries, you can email us at questions@ofx.com
Legal Entity: Number
- Australia : 1800 524 924
- New Zealand: 0800 482 922
- United Kingdom: 020 3996 1739
- Singapore: Personal: +65 6817 8747 , Business: +65 6817 8748
- Hong Kong: Personal: +852 3460 4569, Business: +852 3460 4582
- Ireland: +353 1 270 8804
- Canada: (844) 301-0359
- United States: (844) 301-0359
What should I do if I am worried my OFX account has been compromised?
If you believe your account has been compromised, contact the OFX team straight away.
What can you do to stay safe online?
If you have been impacted we will contact you directly. In the meantime, here are some general steps you can take to help stay safe online:
- Check your account regularly. If you see anything you don’t recognise, contact us straight away.
- Never share your password or security details with anyone. OFX staff will never ask you for this information.
- Only share phone support codes on calls you make to OFX. Never provide these codes by email, text, chat, enter them on a website, or give them to someone who calls you.
- Set up passkeys for the best possible security on your OFX account.
- Turn on two-step authentication. Use it for your email and other online accounts, wherever it’s available.
- Remain alert, especially through email, text message or telephone calls, particularly where the sender or caller purports to be from OFX. Don’t click links or open attachments you weren’t expecting even if the message looks like it’s from us.
Visit our security support page for tips on how to stay safe online, such as password hygiene and scam awareness.