On May 15, 2026, US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) filed an official data breach notice with the Washington Attorney General. Notification letters went out to people whose information was involved. Recipients of that letter can review their options here for free.
The Washington Attorney General filing confirms the breach notice — not a court case. Settlement amounts, claim deadlines, and opt-in/opt-out instructions appear here only when a public court record supports them. No outcome is estimated or guaranteed.
US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.)'s filing with the Washington Attorney General lists these compromised data types:
Each exposed category makes the claim stronger. Courts treat unauthorized disclosure of this information as actionable harm.
US Tiger Securities Inc., operating prominently through its retail brokerage platform TradeUP Securities, Inc., occupies a vital space in the modern digital financial services sector. As a technology-driven broker-dealer registered with the SEC and a member of FINRA, the firm facilitates online trading, investment accounts, and wealth management services for a diverse domestic and international client base. Because of the nature of its business, US Tiger and TradeUP must collect, process, and retain a vast repository of highly sensitive consumer and financial data. This includes exhaustive personal identification records, tax identification numbers, banking details, and comprehensive trading histories required for regulatory compliance, know-your-customer (KYC) verifications, and anti-money laundering (AML) protocols.
In 2026, a significant security incident involving US Tiger Securities Inc. and TradeUP Securities, Inc. was formally reported to the Washington Attorney General's office. While the precise mechanics of the breach continue to be scrutinized, security incidents affecting digital financial institutions typically involve unauthorized access to internal databases, compromise of cloud-hosted customer onboarding portals, or vulnerabilities within third-party vendor software and API integrations. For an online brokerage handling high volumes of automated transactions and sensitive user authentication credentials, any lapse in network perimeter defense or encryption protocols can allow malicious actors to infiltrate sensitive systems, potentially lingering undetected to harvest confidential customer files.
The data compromised in an incident of this magnitude typically includes Full Names, Social Security Numbers, Dates of Birth, Financial Account Numbers, Routing Numbers, Investment Portfolio Details, and Government-Issued Identification Information such as driver's licenses or passports. The exposure of this specific constellation of financial and personal data creates severe, immediate risks for affected account holders. Social Security numbers and identity documents enable sophisticated identity theft, allowing cybercriminals to open fraudulent credit lines, secure unauthorized loans, or intercept tax refunds. Furthermore, compromised financial account details and routing numbers expose victims to direct account takeover attempts, unauthorized wire transfers, and the draining of investment portfolios.
Under federal and state law, financial institutions like US Tiger Securities Inc. and TradeUP Securities, Inc. are bound by strict statutory duties to safeguard consumer information. Under the Gramm-Leach-Bliley Act (GLBA) and the FTC Safeguards Rule, retail brokerages are legally mandated to implement robust administrative, technical, and physical safeguards to protect customer non-public personal information (NPI). These regulations require continuous vulnerability testing, encryption of data both at rest and in transit, and stringent multi-factor authentication controls. The occurrence of a data breach of this scale strongly indicates a potential failure to maintain these mandated security standards, raising serious questions about whether the company neglected its legal obligations to protect its clients.
Receiving an official data breach notification letter from US Tiger Securities Inc. or TradeUP Securities, Inc. carries significant legal implications. First, it serves as a formal, legal admission by the company that your confidential information was compromised due to inadequate security measures. Under Washington law and broader consumer protection doctrines, the receipt of this letter provides affected individuals with the legal standing necessary to participate in a class action lawsuit. Crucially, victims do not need to prove that they have already suffered actual financial theft or out-of-pocket loss to seek legal recourse; the imminent and credible risk of future identity theft is sufficient. Our firm handles these complex data privacy cases on a contingency fee basis, meaning there are never any out-of-pocket costs or hourly fees for class members, and we only recover attorney's fees if a successful recovery is secured on your behalf.
Eligibility is broader than most people expect: you do not have to prove money was stolen, only that your information was put at risk. You may qualify if any of these apply:
You received a data breach notification letter from US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.)
You were a customer, patient, employee, or client of US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.)
Your personal information was stored in US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.)'s systems
Your Social Security number or driver's license number was exposed
Your financial account, credit card, or banking information was disclosed
You reside in the United States (all 50 states eligible)
If you received the US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) data breach notification letter in the mail, our independent notification record for US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) summarizes what the letter says, what information was exposed, and what happens next for recipients.
That letter is legally required and confirms your data was exposed. It also gives you standing to file a claim.
What your notification letter means & what to do next →Four moves to make now — they protect both your identity and your legal position:
Do not discard the US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) letter. It documents your standing as an affected individual — the foundation of any claim you file.
Your letter likely includes a monitoring activation code. Use it: free monitoring flags misuse of your data and records the harm for your case.
A no-cost freeze at each of the three bureaus (Equifax, Experian, TransUnion) blocks new-account fraud in your name; unfreeze anytime you apply for credit.
Time limits can forfeit your claim. Have attorneys review your US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) case at no cost — contingency means zero upfront fees.
Security Incident
Prior to AG notification
Someone gained unauthorized access to data held in US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.)'s systems.
Reported to Attorney General
May 15, 2026
US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) filed its official breach notice with the Washington Attorney General.
Consumer Notification Letters Sent
Within weeks of AG filing
State law obligates companies to mail notification letters to everyone affected.
Legal Window — Act Now
Statute of limitations applies
Legal deadlines limit how long you have to act on this breach.
Several forms of recovery may be available to US Tiger Securities Inc. (“US Tiger”) (TradeUP Securities, Inc.) letter recipients — the exact mix depends on state law and the data types exposed:
Statutory damages exist independent of out-of-pocket loss — California's $100–$750 range is the model other states have followed.
Covers fraud charges, unauthorized account activity, and expenses traced directly to the breach.
Compensation for hours spent monitoring accounts, disputing fraud, freezing credit, and dealing with the aftermath of the breach.
Outlays for monitoring services and identity-restoration help belong in your claim.
SSN and driver's license exposure creates long-term identity theft risk. Courts recognize the ongoing value of this harm and may award damages accordingly.
Exposure of financial account or credit/debit card information entitles victims to recover for actual and potential fraud losses.
Washington's My Health MY Data Act and Consumer Protection Act give residents broad rights to sue companies that fail to protect personal information. Washington courts have been active in data breach class action cases.
These organizations also reported breaches to the Washington Attorney General. If their letters reached you too, each may carry its own claim.
Cascade Coffee, LLC
Washington · Aug 2026
Murfreesboro Medical Clinic (Aesto, LLC d/b/a Aesto Health)
Washington · Aug 2026
Greystar Real Estate Partners, LLC
Washington · Aug 2026
Mogren, Glessner & Ahrens, P.S.
Washington · Sep 2026
The Lighthouse for the Blind, Inc.
Washington · Sep 2026
Lincoln Technical Institute (Nashville Auto-Diesel College)
Washington · Jul 2026
Contact us for a FREE consultation. No fee unless we win your case.
(786) 306-7278Free Claim ReviewLaw Office of David S. Harris