On September 7, Fortress Trust disclosed that several customers had been "impacted by a third-party vendor" compromise. On September 8, Fortress Trust announced they would been acquired by Ripple. On September 11, The Block reported that Ripple would cover undisclosed losses to customers as a part of the acquisition deal. The losses were later disclosed to be around $15 million, and the third-party vendor was said to be a company called Retool, who blamed the compromise on a social engineering attack against one of their employees.
Later that month, Ripple CEO Brad Garlinghouse announced that they had canceled their plans to acquire the company without providing any details.