Matsui Securities: a former employee of its system contractor SCSK stole customers' IDs and passwords and illegally withdrew about 200 million yen from 15 customers
A contractor's former employee abused work privileges, posed as customers to sell securities and withdrew the proceeds; the person was arrested on March 24, 2021.
Disclosed
2021-03-24
Organizations involved
1
Leaked or at risk
210
210
Downtime
Unknown
What happened
From this day until November 12, 2019, the former SCSK employee abused work privileges to steal Matsui Securities customers' IDs, passwords and trading PINs. [1] [2] [4]
A customer told Matsui's call center about trades they did not recognize and an investigation began. About a week later the former employee's involvement was identified. [2] [4]
The former employee was arrested by the Metropolitan Police Department on suspicion of computer fraud and other offenses. Matsui Securities and SCSK each made announcements, and SCSK dismissed the person. SCSK had filed a criminal complaint with the police in September 2020. [1] [2] [3]
Impact
The former employee posed as customers, sold securities and withdrew the proceeds and cash held in the accounts. 15 customers were affected, with total losses of about 200 million yen and no other damage. The person apparently also forged identity documents and opened bank accounts under fictitious names identical to the victims'. [1] [2]
A file listing data on 210 customers was found on the former employee's PC. The full amount was refunded, and SCSK covered the cost. [1] [4]
Timeline
- Started 2017-06-29
- Detected 2020-01-17
- Disclosed 2021-03-24
- 1364 days
Attack or cause
- Method
- [Insider][Credential abuse]
- Impact
- [Data leak][Fraud][Financial loss]
- Entry point
- Supplier
Data exposed or at risk
Supply chain
[Breached]
[Breached]
- Organizations listed on this site
- 1
Organizations involved
[Through a supplier][Critical]Tokyo, ChiyodaFinance and insurance210 leaked
Matsui Securities Co., Ltd.
Sources
- [1][Official]業務委託先元従業員の逮捕についてMatsui Securities · 2021-03-24
- [2][Official]当社元社員による不正行為についてSCSK · 2021-03-24
- [3][News]松井証券のシステム開発委託先SE、顧客口座から2億円着服か パスワードなど不正使用して出金ITmedia NEWS · 2021-03-24
- [4][News]松井証券で顧客資産約2億円が不正引出 - 長年業務に携わる委託先SEが権限悪用Security NEXT · 2021-03-25