I’ve just received an email from support.wise com, offering me a free year’s Dark Web Monitoring, because they say my personal details were somehow compromised by a service they used called Evolve.
Has anyone else received this, is it genuinely from Wise, should I be worried, and should I accept the offer?
It says it involved my USA account details. As I don’t use a USA account, probably not?
I suspect this tells you all you need to know.
You can check on leaked login details here if it interests you.
I had the same email. I believe it’s genuine.
I think you need only be concerned and do anything if you had (and used) a US Dollar account with Wise between 2020 and 2023.
Whether you sign up for their monitoring thing is up to you - I would have thought changing your Wise password ought to be sufficient, and maybe closing the USD account and opening a new one if needed.
Wise are stressing in their email that they don’t believe actual Wise accounts are affected by the data breach, but it might mean someone got your name and USD account number details if you did any USD transactions.
That’s how I read it anyway.
Yes, I read it the same way.
I certainly didn’t fancy signing up for something else!
Personally I wouldn’t click through on the email. Check the Wise app or the website in a new browser window for info.
This is what I got when I did a search in their help section on the website… Data breach at Evolve Bank & Trust in the US
This article was last updated on 28 June 2024. The incident is still ongoing — we’ll continue to monitor the situation and we’ll update the below information accordingly.
What happened?
Evolve Bank & Trust is a regulated bank that we worked with from 2020 until 2023 to provide USD account details. They’ve recently been affected by a data breach and some Wise customers’ personal information may have been involved. We’ll be emailing all Wise customers who we think may have been affected by this data breach directly.
For Evolve Bank & Trust to provide USD account details to Wise customers, they were required to hold identifying information. The information that we shared with Evolve Bank & Trust to provide USD account details included name, address, date of birth, contact details, SSN or EIN for US customers, or another identity document number for non-US customers. Evolve has not yet confirmed to us what data has been impacted.
We no longer work with Evolve Bank & Trust, and USD account details are provided by a different bank. However, we’re actively investigating this situation as keeping your information and money safe is our top priority.
Is my Wise account safe to use?
Yes, we can confirm that this data breach has not impacted our systems. This means:
- your Wise account credentials, including your password, are safe, and you can use your account as normal
- you can continue to use your USD account details — these are no longer connected to Evolve Bank & Trust
- you can continue to use any Wise cards you may have as they were not impacted by this issue – your card number and PIN are safe
We continue to keep your money safe and store your information securely.
Is there anything I need to do?
If you receive any suspicious calls, texts or emails asking about sensitive information, please be extra cautious.
Learn how to avoid phishing
And remember, Wise will never:
- call and ask you to log in to your Wise account to take action against suspicious activity as it’s happening
- ask you to change your password to a specific word or phrase
- ask for your 2-step verification code
- claim to be coordinating in real time with other banks
- instruct you to move money out of your account to a specified bank account
- ask you to ignore unrecognised transaction notifications
If you are based in the US, there are a few additional steps you can take, including:
- Understanding more about preventing identity theft or reporting suspected identity theft by visiting the Federal Trade Commission website. You can also reach out to your State Attorney General and/or local police department to file and obtain a police report.
- Placing a free fraud alert on your credit file by contacting any one of the three major credit bureaus (Equifax, Experian, or TransUnion). As soon as one credit bureau confirms your fraud alert, the others are notified to place fraud alerts. A fraud alert tells creditors to contact you before they open any new accounts or change your existing account.
No - I have changed my Wise account email and password but not going to get involved with the other thing.