This chapter explores the ways in which personal data and digital assets might be misused by strangers and third parties in the context of asset management. As global asset management markets move increasingly to handling investments with the aid of autonomous platforms and algorithms, it is important to be able to identify entities, investors and their agents. Decision-making and transactions need to be trackable. Asset and wealth managers also gather, store and use the personal information of their customers. At the heart of these arrangements is trust. However, the threat of cyberattack or systemic failures gives rise to the question of who should be made liable when losses arise from malicious or negligent data breaches. Often, it is not possible to identify a nefarious individual. Importantly, in the context of asset management, liability for knowing receipt, knowing dealing or knowing assistance may attach to persons dealing with trustees and other types of fiduciaries. This is not an area of law to which a universal regime of absolute liability applies. For this reason, it is useful to identify types of risk and the means to address them.