IwaiCosmo Securities said hackers breached Trade Works, its online trading platform operator, enabling unauthorized trades in some client accounts and exposing 4,975 people’s data.
Japanese brokerage IwaiCosmo Securities said Tuesday that some customer accounts were used for trades the clients did not authorize after hackers gained access to a company that runs the firm’s online trading infrastructure.
According to IwaiCosmo, the intrusion did not occur directly inside the brokerage itself but at Trade Works, the outside operator responsible for IwaiCosmo’s internet trading system. The brokerage said the incident led to unauthorized transactions being executed in affected accounts.
Trade Works has disclosed that the breach exposed personal information belonging to 4,975 individuals. IwaiCosmo said the impacted customer accounts have since been returned to their original state, indicating remedial steps were taken to restore account conditions after the unauthorized activity was identified.
The episode highlights how financial institutions can be affected by vulnerabilities in their technology supply chain, particularly when critical services such as online trading platforms are managed by third-party operators. IwaiCosmo did not provide additional details in its statement about the exact timing of the access, how the attackers entered Trade Works’ systems, or the number of accounts at the brokerage that were involved.
Why it matters
Unauthorized trading can create financial losses and undermine confidence in online investing, even when a brokerage restores account balances after the fact. The compromise of thousands of people’s personal data also increases the risk of fraud and identity misuse beyond the immediate trading incident. Investors and firms will be watching for follow-up disclosures on how the breach occurred, what data was taken, and what new safeguards Trade Works and affected brokerages implement to prevent a repeat.