US Tiger Securities Inc., a fintech brokerage affiliated with TradeUP Securities, Inc., says it discovered on July 10, 2025 that it had been targeted in a cybersecurity incident in which files were encrypted inside the shared virtual back-office environment used by both firms. A subsequent forensic investigation, led by outside legal counsel and a cybersecurity firm, determined that an unauthorized third party had also copied some files out of that environment between July 8 and July 9, 2025. The company says the intrusion did not reach TradeUP’s separate, segmented production trading environment, so customer-facing trading operations were not affected.
The letter is addressed to an individual customer whose personal information was found within the files involved in this incident. US Tiger says it completed a review of the affected data on April 17, 2026 and worked to locate current addresses before sending notifications. The letter does not state an aggregate number of people who were notified.
What information was exposed?
- Your full name
- Additional personal information described only as “the following” in the letter, with the specific category left blank in the copy of the notice we reviewed — if your printed letter lists a specific data type here (such as a Social Security number, account number, or date of birth), treat that as the accurate and complete list for your situation
US Tiger is offering a complimentary 24-month membership to Experian IdentityWorksSM at no cost, which includes credit monitoring, identity restoration assistance, and up to $1 million in identity theft insurance. To activate it, enroll at https://www.experianidworks.com/1Bcredit using the activation code included in your letter, by August 31, 2026 at 11:59 pm UTC — the code will stop working after that date. If you’d rather not enroll online, you can contact Experian’s customer care team before the same deadline and provide your engagement number as proof of eligibility.
What should you do now?
- Enroll in the free Experian IdentityWorks membership before the August 31, 2026 deadline, since it won’t cost you anything and gives you an extra year of monitoring beyond what you’d normally get on your own.
- Read your full printed letter carefully to see exactly which data type was listed in place of the blank in this copy — that detail changes how urgently you should act.
- Review your bank, brokerage, and credit card statements regularly for any transactions you don’t recognize, and report anything suspicious to your financial institution right away.
- Consider placing a free security freeze on your credit file with Equifax, Experian, and TransUnion, which stops new accounts from being opened in your name without your explicit approval.
- Request your free annual credit reports at annualcreditreport.com and check them for accounts or inquiries you didn’t authorize.
- For ongoing peace of mind, consider signing up for a service like Aura or LifeLock, which can alert you if your information appears elsewhere, such as on the dark web.
- If you ever suspect fraud, contact the FTC at identitytheft.gov and consider filing a report with your state Attorney General’s office.