HumidiFi Probes Internal Security Incident; Client Assets Unaffected

The distinction HumidiFi draws between an internal network compromise and client assets is the operative detail: the breach sits in the operator's own infrastructure rather than in customer holdings, which is where the reputational and remediation burden now falls. For a trading venue, that separation is what determines whether the episode stays a security-ops matter or becomes a custody question. Whether the disclosed findings clarify how the internal access was obtained, and whether the promised security upgrades are substantive rather than procedural, is the open question.