We are aware of a claim published on a criminal data leak site alleging that Penfold has suffered a data breach. This claim has also been repeated by some automated cyber security news feeds.
The claim is false.
We were alerted to the listing on 17 August and began investigating immediately with external cyber security specialists. We have reviewed the data being offered by the group. It does not belong to Penfold or to our customers, and it did not come from our systems. Based on its content, we believe it relates to an unrelated business with a similar name. The listing uses Penfold's logo, address and business description, which is why it has been wrongly attributed to us.
We have found no evidence of any unauthorised access to Penfold systems or to customer data. Your pension, your funds and your personal information are unaffected and remain safe. There is no action you need to take.
We are continuing to monitor the situation and will update this page if anything changes.
A note on scams
Claims like this are sometimes followed by scam emails, texts or calls that use the story to create urgency. Please remember:
Penfold will never ask you for your password or for a one-time passcode.
Penfold will never ask you to move your pension to a different account or provider for safekeeping.
Always access your account through the Penfold app or by typing getpenfold.com into your browser rather than following a link.
If you receive something suspicious, forward it to security@getpenfold.com and do not click any links.