Statement about recent cybersecurity incident at TWINO

On 15-16 October 2026, the TWINO investment platform was the target of a cyberattack. As a result, an unauthorized third party gained access to a limited amount of personal data of investors. We sincerely apologize to everyone affected. You trusted us with your data, and we regret that we were not able to protect it fully. 

• Around 8% of current TWINO investors are affected.  

• If your data was affected, we have already contacted you by email at the email address registered on the platform. If you have not received this email, based on the information currently available, your data was not affected. Please also check your spam folder. 

• The platform is operating normally. The attackers did not access investor accounts, passwords were not obtained, and no unauthorized transactions nor withdrawals were made. Your investments and funds are not affected. 

• The attack has been stopped and the vulnerability it exploited has been fixed. 

On the evening of 15 October and on 16 October 2026, a series of consecutive and comprehensive cyberattacks was carried out against the TWINO investment platform. Our IT specialists identified the attack on 16 October and took action to stop it and limit its impact. The subsequent analysis established that personal data of some users had been accessed. On 17 October, the affected data and users were identified and the vulnerability used in the attack was fixed. 

We have notified the Data State Inspectorate of Latvia, the Bank of Latvia and other relevant authorities, and we are cooperating with them. 

Today, TWINO and other financial service providers face attempted cyberattacks every day. A new generation of tools is changing their nature - autonomous AI agents that scan systems on their own, plan their own attack paths and change tactics within seconds when an attempt fails. In recent weeks, financial institutions in South Korea and Japan have reported attacks carried out with such tools. Preliminary findings of our investigation indicate that a similar autonomous AI tool was used in the attack on TWINO. 

TWINO has continuously invested in cybersecurity and technology, and our systems allowed us to detect and stop the attack. Unfortunately, they did not prevent fully the access to the data. AI-driven attacks are a reality that the entire financial sector must prepare for - this does not reduce our responsibility, and we are adapting our defenses accordingly. 

1. The investigation of the incident is ongoing. 

2. We are implementing additional technical and organizational security measures. 

3. We will continue to strengthen the security of our platform and the protection of our users’ data. 

Whether or not your data was affected, we recommend that all TWINO users stay vigilant: 

• TWINO will never ask you - by email, text message or phone - to share your password or authentication codes, approve payment requests or make payments. Neither will your bank. If anyone claiming to be from TWINO asks for this, do not share any information, even if they know your personal details. 

• TWINO only sends emails from [email protected] (customer support), [email protected] (news and marketing) and [email protected] (compliance and AML). The domain twinoinvest.eu was used for communication in the past but is no longer used.