FDCTech Review: No Evidence Supports Claims of 500,000 Record Breach

FDCTech Review and Current Status

FDCTech operates as a Delaware-incorporated OTC company under ticker FDCT. It provides brokerage software and has pursued acquisitions of licensed financial entities, including Alchemy subsidiaries in Malta and Seychelles. Public filings detail expansion plans such as the pending Larstal UK and Denmark deals valued at a $2.35 million base price, subject to regulatory approvals.

Recent 8-K and 10-K filings focus on accounting restatements involving client fund classifications and material weaknesses in internal controls. These disclosures center on financial reporting rather than customer data handling. No section references a cybersecurity event or unauthorized access to records.

Third-party monitoring sites list complaints about ownership transparency and subsidiary regulatory oversight, including FCA reviews of Alchemy Prime Ltd. These points relate to business practices, not data exposure.

FDCTech Security Assessment and Breach Claims

Extensive checks across security databases, dark web monitoring references, and news archives through October 21, 2026, return no matching reports of 500,000 financial customer records offered for sale. Similar past claims involving unrelated entities, such as FDC Group in 2024, do not connect to FDCTech or its subsidiaries.

The company’s latest 10-K cybersecurity disclosure states it maintains a risk management framework and incident response process. It explicitly notes awareness of no incidents that have materially affected or are likely to materially affect the business. SEC EDGAR records contain no notifications of breach notifications to regulators or customers.

The 500,000 figure appearing in older filings refers to an omitted share count from 2021, not customer records. No threat actor posts, forum listings, or regulatory alerts corroborate the alleged sale.

Practical Steps for Users Considering FDCTech

Review the most recent 10-K and 8-K filings on SEC EDGAR or OTC Markets before engaging services. These documents list ongoing litigation, acquisition status, and control remediation efforts. Track regulatory approvals for pending EMI acquisitions through FCA and DFSA channels.

Compare any service agreement terms against standard fintech practices for data segregation and access controls. Customers holding accounts with acquired subsidiaries should confirm direct regulatory status of those entities rather than relying on parent-level statements.

Monitor official channels for updates on internal control remediation. Absence of disclosed incidents does not replace independent verification of data handling procedures when handling financial records.