Wellington Management data breach history (2016-2026): no confirmed breach, repeated impersonation
Wellington Management, the Boston-based investment manager, has no public data breach in the last ten years in the sources we read. Its name is, however, a regular target for impersonators: UK and German regulators have warned about clone firms, fake websites and, in December 2025, WhatsApp investment groups falsely using it.
Short answer
Was Wellington Management hacked?
We found no confirmed breach of Wellington Management’s own systems from 2016 to 2026 in the sources we read. We also found no vendor breach notice naming it, no ransomware leak-site claim and no regulator cybersecurity penalty.
The public record is about impersonation. The FCA lists several clones of Wellington Management International Ltd, including a fake “Wellingtoninv” site added in March 2019. Germany’s BaFin warned in February 2021 that wellingtonfundsfr.com had no link to Wellington Management Europe GmbH, and in December 2025 that WhatsApp groups offering stocks and crypto in Wellington’s name were identity fraud. None of this involves Wellington’s data.
Timeline at a glance
Mar 2019FCA warns of “Wellingtoninv” clone sites (wellingtoninv.com, wellington-investments.com). (FCA warning list)Not a breach
Nov 2020FCA updates its four Wellington clone warnings (first issued 2011-2019). (FCA warning list)Not a breach
23 Feb 2021BaFin: wellingtonfundsfr.com is not connected to Wellington Management Europe GmbH. (BaFin via Mondo Visione)Not a breach
8 Dec 2025BaFin warns of WhatsApp groups falsely run in Wellington Management’s name. (BaFin via Mondo Visione)Not a breach
Last updated November 13, 2026. Every entry is dated and linked to its source; claims by attackers are labelled as claims, never stated as fact.
Wellington Management incident timeline, in detail
Confirmed = acknowledged by Wellington Management, a regulator filing or a court. Reported = credible reporting Wellington Management has not fully confirmed. Unverified claim = an attacker or leak-site claim.
Dec 2025Not a breachBrand impersonation / investment scam
BaFin warns of WhatsApp “Wellington” investment groups
What happened. BaFin warned on 8 December 2025 about WhatsApp groups said to be run by Wellington Management, promoting stock and crypto purchases through supposed institutional accounts and a “Wellington Market Strategy Centre”. BaFin said the offers do not come from Wellington Management Europe GmbH or its staff and called it identity fraud.
Impact. No Wellington data involved. Victims are people who pay the fake operators.
Clone websites and firms copy Wellington’s name and authorisation details
What happened. The FCA warning list carries four clones of Wellington Management International Ltd (FRN 208573): “Wellington Management” (2011), “Wellington Management Portfolios” (2012, wellingtonmp.com), “Wellington Management GmbH” (2012, a Düsseldorf address and wellingtonit.de) and “Wellingtoninv” (2019, wellingtoninv.com and wellington-investments.com), all last updated in November 2020. BaFin separately warned in February 2021 that wellingtonfundsfr.com was not connected to Wellington Management Europe GmbH.
Impact. No Wellington systems or data involved. The FCA says people dealing with a clone firm lose Financial Ombudsman Service and FSCS protection.
Name confusion: a 2022 Maine AG breach notice (phishing and email compromise, seen via search) is for Ellington Management Group, a different New York firm, not Wellington Management. Breach notices for the village of Wellington, Florida, and other “Wellington” companies are also unrelated.
The pattern across the record
Impersonation keeps returning in new channels
Clone websites in 2011-2019, a fake funds domain in 2021 and WhatsApp groups in 2025: the channel changes, the trick of borrowing a large manager’s name does not.
Institutional firms get retail-style scams
Wellington mostly serves institutions, yet the scams target private investors who recognise the name from fund documents. Wellington’s own safety page says it never asks for payments through its website, social media or crypto plans.
What it means for Wellington Management investors — and what to do
If you hold funds sub-advised by Wellington or invest with it directly, the realistic risk is a fake “Wellington” contact, not a data leak.
1.Leave any “Wellington” WhatsApp or Telegram group
BaFin has called these identity fraud, and Wellington says it does not do business or take payments through social media.
We found no confirmed breach of Wellington Management’s own systems from 2016 to 2026 in the sources we read, and no vendor breach notice or ransomware claim naming it.
Is the Wellington Management WhatsApp group real?+
No. BaFin warned in December 2025 that WhatsApp groups offering stocks and crypto in Wellington’s name are identity fraud, and Wellington says it does not do business through social media or chat apps.
Was there a Wellington Management data breach in 2022?+
Not that we found. A 2022 Maine breach notice is for Ellington Management Group, a different firm with a similar name.
How do I check a website claiming to be Wellington?+
Wellington’s email domains are wellington.com and consultantemail.com. Check the FCA register or BaFin’s company database, and use contact details from there, not from the site or message.
More in the Breach Index
Same sourced, verification-tagged timeline, company by company — compare how peers have fared.
Independent analysis for security-leadership education; not affiliated with or endorsed by Wellington Management. Facts are attributed to the dated sources above, and anything disputed or unconfirmed is labelled as such. See the full Breach Index.