OFX Cybersecurity Incident
Last updated: 4 October 2026 11am AEDT
OFX is investigating a cybersecurity incident involving unauthorised access to data, including data relating to some clients. There also appears to be data relating to individuals who have interacted with OFX in non-client capacities, such as job applicants.
At this stage, OFX has not identified any unauthorised access to client accounts or funds. It does not appear that any copies of identity documents have been accessed. It also appears that none of the data accessed can be used to make a payment in the OFX platform.
OFX’s services and systems continue to operate normally and remain fully available.
The security of our clients’ accounts and information is our highest priority. OFX’s IT and Security teams responded immediately when they became aware of the incident and have implemented containment actions.
All clients and individuals affected will be contacted directly by OFX if their data has been accessed.
What should you do next?
We will continue to update this webpage regularly with the latest updates regarding the incident.
OFX will contact clients directly if their data has been accessed.
FAQs
What has happened?
OFX is investigating a cybersecurity incident involving unauthorised access to data, including data related to some clients.
How will I know if I have been impacted?
OFX is still working to understand the identity and number of clients whose data may have been accessed. We will contact impacted clients directly if their data has been accessed.
Is my OFX account secure?
At this stage, OFX has not identified any unauthorised access to client accounts or funds. It appears that none of the data accessed can be used to make a payment in the OFX platform. OFX’s services and systems continue to operate normally and remain fully available.
The security of our clients’ accounts and information is our highest priority. OFX’s IT and Security teams responded immediately when they became aware of the incident and have implemented containment actions.
Are we still operating as normal?
OFX’s services and systems continue to operate normally and remain fully available. You can continue to use your OFX account.
How will you keep clients updated?
We will continue to update this webpage regularly with the latest updates.
OFX will contact clients directly if their data has been accessed.
What should I do if I am worried my OFX account has been compromised?
If you believe your account has been compromised, contact the OFX team straight away.
What do I tell a supplier who contacts us and is concerned?
Please send all supplier queries regarding this incident to Matt.Robson@ofx.com
What can I do to stay safe online?
If you have been impacted we will contact you directly. In the meantime, here are some general steps you can take to help stay safe online:
- Check your account regularly. If you see anything you don’t recognise, contact us straight away.
- Never share your one-time password, password, or security details with anyone. OFX staff will never ask you for this information.
- Set up passkeys for the best possible security on your OFX account.
- Turn on two-step authentication. Use it for your email and other online accounts, wherever it’s available.
- Remain alert, especially through email, text message or telephone calls, particularly where the sender or caller purports to be from OFX. Don’t click links or open attachments you weren’t expecting even if the message looks like it’s from us.