Skip to content

Change log · 2 entries

Topstep: change log

Everything that demonstrably changed at Topstep – rules, prices, status. Dated, scoped, with grandfathering and source.

Status
operating
Rules recorded since
RSS feed for Topstep

New entries by RSS – no account, no email address.

Email me when Topstep changes its rules

  1. Data breach

    Firm-wide

    According to Finance Magnates on 5 January 2026, Topstep told some users by letter that files containing personal data may have been accessed without authorisation between 8 September and 16 October 2025; the letter links this to a DDoS attack on 8 September 2025. Topstep Support then wrote on X that Topstep's systems had not been breached and that a small number of traders who reused passwords from other, breached sites were affected. According to the letter, affected users get free credit monitoring.

    source is a third party (press or regulator), not the firm.

    Source

  1. Data breach

    Firm-wide

    A sample notification letter from Topstep (January 2026, published by ClassActionU) describes a credential-stuffing attack on 14 December 2025, discovered on 15 December 2025: attackers may have accessed accounts with credentials stolen elsewhere. Possibly affected for some users: name, contact and profile information, date of birth, phone number, government ID numbers, tax information and Social Security numbers. According to the letter, Topstep forced password resets for the affected accounts, offers free credit monitoring and is working on further safeguards such as mandatory multi-factor authentication.

    source is a third party (press or regulator), not the firm.

    Source

To the firm profileChanges at all firms