Wealthsimple Class Action Lawsuit 2025: Data Breach & Crypto

Wealthsimple faces two class action lawsuits that test its security and transparency promises: a data breach class action filed in October 2025 and a cryptocurrency fee settlement reached in May 2025. For the two million Canadians using the platform, the question is whether their money and data remain safe.

Lawsuit filed: October 2025 ·
Settlement in crypto fee case: May 2025 ·
Data breach affected clients: 2023 (supply-chain attack)

Six key facts, one pattern: Wealthsimple’s legal troubles span data security and hidden fees — two areas that matter most to Canadian investors considering the platform.

Here is a snapshot of the key facts from both lawsuits.

The implication: While the crypto settlement is small relative to Wealthsimple’s valuation, the data breach suit could expose systemic supply-chain risks that affect every Canadian client.

What is the Wealthsimple class action lawsuit about?

The 2023 supply-chain data breach

• Slater Vecchio LLP filed a proposed class action in October 2025 after a third-party software provider suffered a supply-chain attack, compromising client data. (Slater Vecchio LLP, Vancouver litigation firm)
• Exposed information includes names, addresses, Social Insurance Numbers, account numbers, government-issued IDs, and IP addresses of Canadian customers. (Slater Vecchio LLP)
• Wealthsimple notified affected clients directly by email on September 5, 2025. (Slater Vecchio LLP)

The 2025 cryptocurrency fee settlement

• On May 14, 2025, the Superior Court of Quebec authorized a class action settlement regarding undisclosed cryptocurrency commissions and fees. (LPC Avocat, Quebec class-action firm)
• The settlement amount is $750,000 CAD, subject to court approval at a hearing set for June 2025. (LPC Avocat)
• A separate lawsuit filed September 29, 2025 by Montreal plaintiff Shay Abicidan seeks $10 million in punitive damages against Wealthsimple and Shakepay, alleging they misrepresented crypto trades as “commission-free” while charging 1.5-2% fees and wide spreads. (Wealth Professional, investment industry news)

What this means: Wealthsimple markets itself as low-cost and transparent, but these lawsuits suggest hidden layers — both in software security and in pricing — that contradict that promise for crypto traders.

How do I know if I was affected by the Wealthsimple data breach?

Notifications sent to impacted clients

• Wealthsimple sent an “Important Security Update” directly to all affected clients by email on September 5, 2025, as confirmed by the law firm filing the suit. (Slater Vecchio LLP)
• If you did not receive an email, your data may not have been exposed — but the exact scope of affected clients hasn’t been publicly disclosed.

How to check your account for unusual activity

1. Review recent login attempts and any unrecognized transfers or withdrawals in your Wealthsimple account.
2. Enable two-factor authentication and change your password as a precaution.
3. Monitor your credit report for unauthorized new accounts — exposed SIN and ID data can enable identity fraud.
4. Consider placing a fraud alert or credit freeze with Equifax and TransUnion.
5. Report any suspicious activity to Wealthsimple support and local police.

The pattern: The breach notice was specific enough to meet legal obligations, but vague on total numbers — leaving most clients guessing whether they’re at risk.

How much compensation can I get from the Wealthsimple class action?

Typical compensation for data breach class actions in Canada

• Canadian data breach class actions often result in credit monitoring services, modest cash payments ($50-$500), or coverage for proven losses. For example, the 2019 LifeLabs breach settlement offered up to $150 for out-of-pocket expenses. (CTV News, national news outlet)
• The Wealthsimple data breach case is still at the filing stage; no settlement has been proposed yet.

How settlement amounts are distributed

• The Quebec crypto fee settlement offers $750,000 total, with class counsel fees of $225,000 plus taxes, and a request deadline of July 31, 2025 for clients without active accounts. (LPC Avocat)
• Individual payouts in that case are expected to be modest — likely covering partial refunds on fees rather than windfall compensation.

Why this matters: The crypto settlement is already capped at $750K spread across thousands of users; unless you had large crypto trades, your individual compensation will likely be minimal.

How trustworthy is Wealthsimple?

Security measures and regulatory oversight

• Wealthsimple is regulated by the Canadian Investment Regulatory Organization (CIRO) and is a member of the Canadian Investor Protection Fund (CIPF), which covers securities held at the firm up to $1 million. (Wealthsimple Security page, official documentation)
• Cash accounts are insured by the Canada Deposit Insurance Corporation (CDIC) up to $100,000. (CDIC, federal deposit insurer)
• The platform offers two-factor authentication, device-based passcodes, and biometric login.

Client reviews and Reddit discussions

• On Reddit communities like r/Wealthsimple and r/PersonalFinanceCanada, many users report smooth experiences but note that customer support response times have slowed since the platform’s growth. (Reddit community, user discussions)
• Mixed reviews on the App Store and Google Play cite occasional account freezes and withdrawal delays, but most trust the platform for core investing.

The implication: Wealthsimple’s regulatory framework is solid, but the data breach lawsuit shows that even regulated platforms can be compromised through third-party vendors — a risk CIPF can’t cover.

Is it safe to keep a lot of money in Wealthsimple?

CIPF coverage limits

• CIPF protects securities (stocks, ETFs, bonds) up to $1 million per account type, and certain registered accounts (RRSP, TFSA, RRIF) receive separate coverage. (CIPF, investor protection fund)
• This means a TFSA and an RRSP each have $1 million in coverage, giving heavy investors strong protection against insolvency — but not against data breaches or fraud.

Security features: multi-factor authentication, encryption

• Wealthsimple uses 256-bit encryption for data in transit and at rest. (Wealthsimple Security page)
• Users can enable Google Authenticator or SMS-based two-factor authentication, and the app requires biometric or PIN unlock on mobile.
• Despite these measures, the supply-chain breach exposed personal data without bypassing account security — a reminder that encryption doesn’t protect against vendor vulnerabilities.

The pattern: For a long-term investor with over $100,000, Wealthsimple offers adequate insurance coverage — but the data breach lawsuit underscores that insurance doesn’t replace data privacy.

Timeline

What we know — and what’s still uncertain

Confirmed facts

• A class action lawsuit was filed in October 2025 over a 2023 data breach. (Slater Vecchio LLP)
• A settlement agreement was reached in May 2025 regarding cryptocurrency trading fees. (LPC Avocat)
• Exposed data included names, addresses, SIN, account numbers, government IDs, and IPs. (Slater Vecchio LLP)

What’s unclear

• Exact number of affected clients in the data breach.
• Final settlement amounts and distribution details for the data breach case.
• Whether the data breach exposed financial account credentials or only personal information.

Key voices on the Wealthsimple lawsuits

“The lawsuit alleges that the breach resulted from a supply-chain attack on a software package supplied to Wealthsimple by a third-party vendor.”

Slater Vecchio LLP (law firm filing the class action)

“Canadians who use the online investment management app Wealthsimple could be part of a class action against the company.”

CTV News (national news coverage)

“We have always been transparent about what we charge for our services – that’s our commitment to our clients. This legal action has no merit.”

Wealthsimple statement quoted by Wealth Professional

Summary: What this means for Canadian investors

Frequently asked questions