Trade Nation Data Breach: What Was Exposed

In short: Trade Nation told clients on 24 October 2026 that an unauthorised party accessed account-opening records — names, email addresses, phone numbers, dates of birth, postal addresses and nationality — through a third-party reporting system on 15 September, according to the breach notice sent to clients. Passwords, card numbers, bank details and funds were not accessed, the company says. The main risk now is scam calls, texts and emails using your real details.

No fraud has been linked to the breach so far, but the exposed details — real name, phone number and a known trading relationship — are exactly what makes phishing and "recovery room" approaches convincing, so treat unsolicited contact with care.

What happened at Trade Nation and when?

An unauthorised party exploited a vulnerability in a third-party reporting system used by the broker and accessed client records on 15 September 2026. Trade Nation says it found the breach on 22 October, took the system offline, and removed the attacker's access the same day, according to the client notice reviewed by Privacy Unpacked. Clients were told on 24 October, more than five weeks after the initial access.

Trade Nation Financial Markets Ltd is registered in the Seychelles and holds licence number SD150 from the Financial Services Authority of Seychelles.

What personal information was exposed in the breach?

The notice says the records accessed were limited to details clients provided when they opened an account: "name, email address, telephone number, date of birth, postal address and nationality," per the company's client notice. Trade Nation says passwords, card details, bank account details and funds "were never accessed," and that "the impacted reporting system does not hold this data."

What scams and fraud should I expect after this breach?

Expect scam calls, texts and emails that already know your real name, phone number and trading relationship with Trade Nation — which makes them far more convincing than generic spam. Two specific patterns to watch for:

• Recovery room scams. Fraudsters approach people who have had losing trades or failed investments and offer to help them get their money back for an upfront fee. The Financial Conduct Authority warns: "There is usually no explanation about how money will be recovered, or a false one is given."
• Clone firms. Scammers pretend to be from a real, authorised firm to trick people into sending money or details, a tactic the FCA describes on its clone firms and individuals page.

Phishing emails, smishing texts and vishing phone calls are all likely vectors here. The UK's National Cyber Security Centre defines phishing as criminals using "scam emails, text messages or phone calls" to get victims to visit a fake website or hand over personal information.

How do I protect my Trade Nation account right now?

Follow these steps:

1. Type tradenation.com directly into your browser rather than clicking any link in an email, text or message about your account. The company's client notice says: "Be wary of clicking links in any message about your account, even if it looks like ours. Check the sender's email address. We only write from tradenation.com addresses. In case of doubt, go to tradenation.com directly."
2. Turn on two-factor authentication. Trade Nation's notice says: "We also offer two-factor authentication (2FA) to all our clients to protect your account even further," so check your account settings and enable it now.
3. Reset your password, even though Trade Nation says none were compromised — the company itself recommends resetting "regularly" as good practice.
4. Never give out a one-time code, 2FA code, full card number or password by phone, text, email or message. Trade Nation states plainly it "will never ask" for any of these.
5. Never move money to another account if someone contacts you claiming your funds are at risk — Trade Nation's notice says it will "never ask you to move money to another account for safekeeping," and that script is a classic scam setup.
6. Check the sender's email address on anything claiming to be from Trade Nation; only addresses ending in tradenation.com are genuine.
7. Report suspected scam emails, texts, calls or websites using the NCSC's dedicated phishing reporting channels.
8. Follow general breach hygiene too — see what to do after a data breach for steps that apply beyond this one incident, and consider whether to remove your data from people-search sites that may now be easier to populate with your exposed details.

What should I do if I've been contacted by scammers claiming to help me?

Hang up or stop replying, and don't send any money or codes. If someone offers to recover trading losses for an upfront fee, or claims to work with a regulator to get your money back, treat it as a recovery room scam — the FCA warns these approaches typically come with "no explanation about how money will be recovered, or a false one is given." Report the approach through the NCSC's phishing channels linked above.

What's still not known?

Trade Nation's notice does not say how many clients were affected, nor does it give a full technical timeline of exactly how long the attacker had access beyond the 15 September entry date and the 22 October discovery and removal date. No separate statement from the FCA or the Seychelles Financial Services Authority specific to this incident has been published alongside the company's own notice. Treat any site or email claiming to represent an official "claims" or "settlement" process for this breach with suspicion unless it comes directly from tradenation.com.

If you want the fuller rundown of steps to take after any breach, not just this one, read what to do after a data breach next.

Updated 26 October 2026: Added a closing sentence linking to the site's general data-breach checklist as a next step for readers.