Point72 data breach: two accounts taken over by social engineering, July 31 and August 3, 2026

Date	Event
July 31, 2026	First account compromised
August 1, 2026	Point72 discovers the access to the first account
August 3, 2026	Second account compromised
August 4, 2026	Point72 discovers the access to the second account; no unauthorized access after this date
November 5, 2026	Massachusetts logs the notice (28 residents)

What happened at Point72?

Each account was found within a day of its takeover. In that time the intruder used the accounts to copy files. Point72 says it contained the access, brought in outside data security experts and notified law enforcement, and that it has seen no unauthorized access since August 4. The letter frames the attack as one that has also hit other financial firms. It does not say how the account holders were deceived, for example by a call to a help desk or a phishing message.

Why would Point72 have my information?

The letter's explanation is the third-party data described above, received in connection with investments its affiliates are considering; it does not name the companies whose data was involved. It says the copied materials included some of the recipient's personal information, and leaves the specific data elements as a field filled in per letter. Why you got a breach letter from a company you never dealt with explains how data ends up with a firm like this.

What information was exposed?

Your letter lists it. Across the notice, Massachusetts marks Social Security numbers and financial account numbers as involved, and not medical records, driver's licenses or card numbers. Point72 says it has no evidence the information has been used for identity theft or fraud.

Data type (Massachusetts report)	Marked
Social Security number	Yes
Financial account	Yes
Medical records	No
Driver's license	No
Credit or debit card number	No

What is Point72 offering?

Identity monitoring through Kroll at no cost, for a term stated in each letter. You activate it at enroll.krollmonitoring.com with the membership number in the letter, before the deadline it gives. Questions go to (844) 971-8640, Monday to Friday, 9:00 a.m. to 6:30 p.m. Eastern. The letter also advises changing the password and security questions on any account that shows suspicious activity and telling the institution that holds it. Credit monitoring offers in breach letters compares Kroll's package with the others in the log.

Where can I read about other social engineering breaches?

Social engineering in SEC 8-K filings shows how public companies describe it, bank, brokerage and mortgage breach notices compares what financial firms tell people, and the financial services hub lists every such notice on record.