securities
2 articles with this tag
Unauthorized access to Monex Securities' account-opening system (up to 1.13 million email addresses, 1,592 ID document images): what may have leaked and what to do today
On November 13, 2026, Monex Securities announced that unauthorized access to part of its account-opening systems, which are run and managed by an outsourced contractor, may have leaked personal information. The contractor detected an attempted unauthorized access on October 18 and cut off external access on October 19 (account opening is currently partly suspended). An interim report from an external forensic firm named, as confirmed so far, two kinds of data: up to 1.13 million email addresses (registered in the first step of online account-opening applications since October 16, 2019) and 1,592 ID document image files (the front of My Number cards, the front and back of driver's licenses, and selfie images). Account numbers, login passwords and trading passwords are not in the same database, and the company says it has confirmed they have not leaked as of now. No leak of the My Number or the back of the My Number card has been confirmed. The investigation continues, and the figures may change after further review. No unauthorized trading or impact on assets has been confirmed. The cause is under investigation. Our conclusion: if your email address may be affected, do not open links in email or SMS that claim to be from Monex Securities; if images of your ID documents may be affected, watch your accounts for impersonation attempts.
Unauthorized access to SMBC Nikko Securities' employee stock plan system (up to 56,487 members): names, addresses and transfer account information may have leaked — what plan members should do
On November 11, 2026, SMBC Nikko Securities announced that a third party had gained unauthorized access to the system it uses to administer employee stock ownership plans (mochikabu-kai) and that personal information of plan members had leaked or may have leaked. It confirmed the unauthorized access on November 9, blocked access to the system the same day and suspended the service. Up to 56,487 members are covered. The items are: plan name, investment stock information, member ID number, name, address, dividends and taxes, holding balance and transfer account information; the items that leaked differ from member to member. Phone numbers and email addresses are not registered in the system and did not leak. The company says no secondary damage caused by this incident has been confirmed. The cause and scope are under investigation, and the company says it will contact the affected plans individually. As of November 13, 2026, no follow-up notice had been found. This site's conclusion: plan members should not respond to contact in the company's or the plan's name, should check the deposits and withdrawals on the account where dividends are paid, and should wait for guidance from their plan's administration office.