---
title: "ETNA and Tradier customer-data incident"
description: "ETNA and Tradier customer-data incident. Tradier says its own network remained secure."
incident_type: "Cybersecurity incident"
status: "active"
last_modified: "2026-10-30"
canonical_url: "https://www.ally.security/incidents/etna-tradier-customer-data-incident-2026"
markdown_url: "https://www.ally.security/incidents/etna-tradier-customer-data-incident-2026.md"
stix_url: "https://www.ally.security/incidents/etna-tradier-customer-data-incident-2026/stix.json"
---

# ETNA and Tradier customer-data incident

Tradier learned on September 3, 2026 of an attack against ETNA Software Corporation, which supplies its order-management system and pre-trade controls. Tradier says its own network remained secure.

Last modified Oct 30, 2026 · 1 source

## Summary

- **Environment:** ETNA order management and pre-trade controls
- **Operational impact:** Tradier says its own network remained secure
- **Financial impact:** No confirmed incident cost quantified

## What happened

[Tradier](https://tradier.com/) learned on September 3, 2026 of an attack against [ETNA Software Corporation](https://www.etnasoft.com/), which supplies its order-management system and pre-trade controls. Tradier says its own network remained secure. [1](#source-1)

## Impact

Account-identification data held by ETNA may have been accessed. Tradier lists names, addresses, phone numbers and other personal information, potentially including Social Security numbers or similar tax identifiers. No affected-person total is established. [1](#source-1)

## Timeline

### September 3, 2026 — Tradier learns of provider attack

The brokerage began reviewing the possible impact on account-identification information. The [notification sample](https://oag.ca.gov/system/files/Data%20Subject%20Notification%20and%20Attachement.pdf) provides the account. [1](#source-1)

### October 30, 2026 — Briefing updated

This briefing was last reviewed and updated on October 30, 2026.

## Threat Group & Attack Vector

The notice places the attack at ETNA but does not identify initial access, a vulnerability or an attacker. It does not establish compromise of Tradier’s network. [1](#source-1)

### Actors

- No threat actor group has been identified in the reviewed public evidence.

### TTPs

- No specific MITRE ATT\&CK technique is currently mapped for this case.

## Response

Tradier and ETNA reviewed potentially affected accounts. Tradier also reviewed third-party relationships and data minimization and offered up to two years of credit monitoring and identity protection. [1](#source-1)

## Assets

[Download the case-scoped STIX 2.1 bundle](<https://www.ally.security/incidents/etna-tradier-customer-data-incident-2026/stix.json>)

## Sources

Primary source records used to research this incident.

<a id="source-1"></a>

### Tradier Brokerage, Inc. — notice of data incident

official · Tradier Brokerage, Inc.

<https://oag.ca.gov/system/files/Data%20Subject%20Notification%20and%20Attachement.pdf>

<details>
<summary>Evidence ledger</summary>

Review the supporting structured claims.

1. **Occurred At · 100% confidence · current**  
   Tradier learns of provider attack: 2026-09-03
2. **Resulted In · 100% confidence · current**  
   ETNA and Tradier customer-data incident: Account-identification data held by ETNA may have been accessed. Tradier lists names, addresses, phone numbers and other personal information, potentially including Social Security numbers or similar tax identifiers. No affected-person total is established.
3. **Affected Organization · 100% confidence · current**  
   ETNA and Tradier customer-data incident: ETNA Software Corporation
4. **Vendor Of · 100% confidence · current**  
   ETNA Software Corporation: Tradier Brokerage, Inc.
5. **Resulted In · 100% confidence · current**  
   ETNA and Tradier customer-data incident: Tradier learns of provider attack
6. **Resulted In · 100% confidence · current**  
   ETNA and Tradier customer-data incident: The notice places the attack at ETNA but does not identify initial access, a vulnerability or an attacker. It does not establish compromise of Tradier’s network.
7. **Resulted In · 100% confidence · current**  
   ETNA and Tradier customer-data incident: Tradier learned on September 3, 2026 of an attack against ETNA Software Corporation, which supplies its order-management system and pre-trade controls. Tradier says its own network remained secure.
8. **Affected Organization · 100% confidence · current**  
   ETNA and Tradier customer-data incident: Tradier Brokerage, Inc.
9. **Resulted In · 100% confidence · current**  
   ETNA and Tradier customer-data incident: Tradier and ETNA reviewed potentially affected accounts. Tradier also reviewed third-party relationships and data minimization and offered up to two years of credit monitoring and identity protection.

</details>