Topstep LLC, a platform for traders, formally reported a data security incident to the Indiana Attorney General on January 20, 2026, stemming from a breach discovered on December 14, 2025. Given the nature of Topstep's business, which involves evaluating and funding traders, the company handles a significant volume of highly sensitive personal and financial data.
The breach exposed a critical array of personal and financial information. The compromised data types include Full Name, Social Security Number, Date of Birth, Banking and Direct Deposit Details, Government-Issued Identification, Email Address, Physical Address, and Trading Account Credentials. This exposure creates severe risks of identity theft, financial fraud, and unauthorized account access for those affected.
As a custodian of sensitive consumer and financial records, Topstep LLC was legally obligated to implement robust cybersecurity measures. The occurrence of this data breach suggests potential failures in these foundational security protocols. Such lapses may constitute a breach of the implied contract between the company and its users regarding data protection.
Receiving a data breach notification letter from Topstep LLC indicates that your private information was compromised. This provides a basis for legal standing, even if you have not yet experienced financial loss or identity theft. The increased risk and potential for future harm are sufficient grounds for seeking recourse. Our firm is actively investigating potential claims on behalf of all impacted individuals who received a notification letter.
We operate on a contingency fee basis, meaning you incur no out-of-pocket costs, and we only receive fees if we successfully secure a recovery for you. This is attorney advertising; prior results do not guarantee similar outcomes.