A class action lawsuit alleges that SoFi Technologies suffered a data breach exposing sensitive customer information, potentially affecting tens of thousands of users of its banking, lending, and investment platform. Exposed data allegedly includes personally identifiable information and financial account details, though SoFi has not publicly confirmed the breach, its scope, or its technical cause. The primary business risks are regulatory scrutiny under GLBA and state privacy laws, reputational damage, and elevated fraud exposure for affected customers; all claims remain alleged at this stage.