Australian online investment platform Stake confirmed customer personal data was compromised following a cybersecurity incident at its US execution and clearing custodian partner, DriveWealth. DriveWealth notified Stake that an unauthorized third party accessed part of its environment containing information for Stake Wall St customers. The compromised data elements included customer full names, email addresses, phone numbers, residential postal addresses, tax status records (W-8/W-9 forms, excluding tax file numbers or government identification numbers), DriveWealth account numbers, and cash balance/portfolio valuation snapshots. Stake confirmed that its own core infrastructure, website, and mobile applications were not breached, and no unauthorized trading, fund transfers, or withdrawals occurred. Stake notified the OAIC, the Office of the Privacy Commissioner in New Zealand, and initiated direct communications to affected account holders.