According to ASIC, Fortnum's authorised representatives experienced at least five cybersecurity incidents prior to May 2023. These breaches reportedly led to sensitive client information being compromised and, in some instances, disseminated on the dark web. Such lapses not only violate regulatory requirements but also erode client trust and confidence in the firm's ability to safeguard personal data.

In its statement to the New South Wales Supreme Court, ASIC emphasised that Fortnum's inadequate cybersecurity measures posed significant risks to clients, potentially leading to financial loss and identity theft. The regulator's action serves as a clear message to financial institutions about the critical importance of implementing robust cybersecurity protocols to protect client information.

Fortnum Private Wealth has responded by stating its intention to vigorously defend against ASIC's allegations. The firm asserts that it has taken steps to enhance its cybersecurity framework and remains committed to maintaining the highest standards of client data protection.

This case highlights the growing emphasis on cybersecurity within the financial services industry. As digital transactions become increasingly prevalent, financial institutions must prioritise the implementation of comprehensive security measures to protect client data. Failure to do so not only invites regulatory scrutiny but also jeopardises the trust and loyalty of clients.

For consumers, this development serves as a reminder to remain vigilant about the security practices of their financial service providers. Ensuring that institutions adhere to stringent data protection standards is essential in safeguarding personal and financial information in an increasingly digital world.

Author: Paige Estritori
Published: Sunday 14th June, 2026

Please Note: If this information affects you or is relevant to your circumstances, seek advice from a licensed professional.

Share this article: